Microsoft Microsoft Malware Protection Engine
16 CVEs affecting Microsoft Microsoft Malware Protection Engine. Latest disclosed: 2026-07-14. Critical: 0, High: 12.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-45584 | High | 8.1 | 2026-05-20 | Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network. |
CVE-2026-55012 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. |
CVE-2026-55011 | High | 7.8 | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally. |
CVE-2026-50656 | High | 7.8 | 2026-06-16 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet &quo… |
CVE-2026-41091 | High | 7.8 | 2026-05-20 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
CVE-2021-42298 | High | 7.8 | 2021-11-10 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-34471 | High | 7.8 | 2021-08-12 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2021-34464 | High | 7.8 | 2021-07-16 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-34522 | High | 7.8 | 2021-07-14 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-31985 | High | 7.8 | 2021-06-08 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2023-24860 | High | 7.5 | 2023-04-11 | Microsoft Defender Denial of Service Vulnerability |
CVE-2022-37971 | High | 7.1 | 2022-10-11 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2023-33156 | Medium | 6.3 | 2023-07-11 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2023-23389 | Medium | 6.3 | 2023-03-14 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2022-24548 | Medium | 5.5 | 2022-04-15 | Microsoft Defender Denial of Service Vulnerability |
CVE-2021-31978 | Medium | 5.5 | 2021-06-08 | Microsoft Defender Denial of Service Vulnerability |