WD
Product
Windows Defender
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
29
CVEs
2
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 17Medium 6Low 0
Watch

Add Windows Defender to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-1647
In wildKEV
7.8
40%
Jan 12
Microsoft Defender Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2017-8540
In wildKEV
7.8
72%
May 26
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Affected: All versions, or not specified
CVE-2018-0986
8.8
63%
Apr 4
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka…
Affected: All versions, or not specified
CVE-2023-36422
7.8
1%
Nov 14
Microsoft Windows Defender Elevation of Privilege Vulnerability
Affected: before 4.18.23100.2009
CVE-2023-38175
7.8
1%
Aug 8
Microsoft Windows Defender Elevation of Privilege Vulnerability
Affected: before 1.1.23060.3001
CVE-2021-24092
7.8
1%
Feb 25
Microsoft Defender Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2020-1170
7.8
2%
Jun 9
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to…
Affected: All versions, or not specified
CVE-2020-1163
7.8
1%
Jun 9
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to…
Affected: All versions, or not specified
CVE-2020-0835
7.8
1%
Apr 15
An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link…
Affected: All versions, or not specified
CVE-2017-8558
7.8
44%
Jun 29
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…
Affected: All versions, or not specified
CVE-2017-8541
7.8
48%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-8538
7.8
50%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-0290
7.8
81%
May 9
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2019-1255
7.5
4%
Sep 23
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'
Affected: All versions, or not specified
CVE-2020-1461
7.1
1%
Jul 14
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would…
Affected: All versions, or not specified
CVE-2020-1002
7.1
1%
Apr 15
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would…
Affected: All versions, or not specified
CVE-2019-1161
7.1
1%
Aug 14
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations
Affected: All versions, or not specified
CVE-2026-70264
5.5
0%
Oct 13
Microsoft Defender Information Disclosure Vulnerability
Affected: before 1.1.26090.9
CVE-2017-8542
5.5
6%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-8539
5.5
6%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-8537
5.5
17%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-8536
5.5
17%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2017-8535
5.5
17%
May 26
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
Affected: All versions, or not specified
CVE-2013-3154
–
2%
Jul 10
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain…
Affected: All versions, or not specified
CVE-2013-0078
–
2%
Apr 9
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a…
Affected: All versions, or not specified
CVE-2011-0037
–
2%
Feb 25
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client…
Affected: All versions, or not specified
CVE-2008-1438
–
13%
May 13
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent…
Affected: All versions, or not specified
CVE-2008-1437
–
13%
May 13
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent…
Affected: All versions, or not specified
CVE-2006-5270
–
30%
Feb 13
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote…
Affected: All versions, or not specified
Showing 29