Vulnerabilities > Microsoft > Malware Protection Engine > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-11 CVE-2023-33156 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Elevation of Privilege Vulnerability
local
high complexity
microsoft
7.0
2023-04-11 CVE-2023-24860 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Denial of Service Vulnerability
network
low complexity
microsoft
7.5
2022-10-11 CVE-2022-37971 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Windows Defender Elevation of Privilege Vulnerability
local
low complexity
microsoft
7.1
2021-11-10 CVE-2021-42298 Code Injection vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-94
7.8
2021-08-12 CVE-2021-34471 Improper Privilege Management vulnerability in Microsoft Malware Protection Engine
Microsoft Windows Defender Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-269
7.8
2021-07-16 CVE-2021-34464 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2021-07-14 CVE-2021-34522 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2021-06-08 CVE-2021-31985 Unspecified vulnerability in Microsoft Malware Protection Engine
Microsoft Defender Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2017-12-08 CVE-2017-11940 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution.
local
low complexity
microsoft CWE-119
7.8
2017-12-07 CVE-2017-11937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution.
local
low complexity
microsoft CWE-119
7.8