Microsoft: >> Malware Protection Engine Security Vulnerabilities
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-07-14
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-07-14
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVSS Score
7.8
EPSS Score
0.107
Published
2026-06-16
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.009
Published
2026-05-20
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Known exploited
CVSS Score
7.8
EPSS Score
0.096
Published
2026-05-20
Microsoft Defender Elevation of Privilege Vulnerability
CVSS Score
6.3
EPSS Score
0.003
Published
2023-07-11
Microsoft Defender Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.03
Published
2023-04-11
Microsoft Defender Elevation of Privilege Vulnerability
CVSS Score
6.3
EPSS Score
0.003
Published
2023-03-14
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.006
Published
2022-10-11
Microsoft Defender Denial of Service Vulnerability
CVSS Score
5.5
EPSS Score
0.027
Published
2022-04-15
Page 1