Vulnerabilities > Microsoft > Malware Protection Engine > 1.1.14306.0

DATE CVE VULNERABILITY TITLE RISK
2023-07-11 CVE-2023-33156 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Elevation of Privilege Vulnerability
local
high complexity
microsoft
7.0
2022-10-11 CVE-2022-37971 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Windows Defender Elevation of Privilege Vulnerability
local
low complexity
microsoft
7.1
2022-04-15 CVE-2022-24548 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Denial of Service Vulnerability
local
low complexity
microsoft
5.5
2021-11-10 CVE-2021-42298 Code Injection vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-94
7.8
2021-08-12 CVE-2021-34471 Improper Privilege Management vulnerability in Microsoft Malware Protection Engine
Microsoft Windows Defender Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-269
7.8
2021-07-14 CVE-2021-34522 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2021-06-08 CVE-2021-31978 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Denial of Service Vulnerability
local
low complexity
microsoft
5.5
2021-06-08 CVE-2021-31985 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2017-12-08 CVE-2017-11940 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Malware Protection Engine 1.1.10600.0/1.1.10701.0/1.1.14306.0
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution.
network
microsoft CWE-119
critical
9.3
2017-12-07 CVE-2017-11937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Malware Protection Engine 1.1.10600.0/1.1.10701.0/1.1.14306.0
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution.
network
microsoft CWE-119
critical
9.3