Microsoft: >> Malware Protection Engine Security Vulnerabilities
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
CVSS Score
7.8
EPSS Score
0.006
Published
2026-08-14
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-07-14
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-07-14
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVSS Score
7.8
EPSS Score
0.114
Published
2026-06-16
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.009
Published
2026-05-20
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Known exploited
CVSS Score
7.8
EPSS Score
0.082
Published
2026-05-20
Microsoft Defender Elevation of Privilege Vulnerability
CVSS Score
6.3
EPSS Score
0.003
Published
2023-07-11
Microsoft Defender Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.03
Published
2023-04-11
Microsoft Defender Elevation of Privilege Vulnerability
CVSS Score
6.3
EPSS Score
0.003
Published
2023-03-14
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.007
Published
2022-10-11
Page 1