Microsoft Windows Defender
5 CVEs affecting Microsoft Windows Defender. Latest disclosed: 2026-10-13. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0986 | High | 8.8 | 2018-04-04 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory co… |
CVE-2021-24092 | High | 7.8 | 2021-02-25 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2021-1647 | High | 7.8 | 2021-01-12 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2019-1161 | High | 7.1 | 2019-08-14 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, a… |
CVE-2026-70264 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. |