Product by Microsoft
Microsoft Malware Protection Engine
34 known vulnerabilities in Microsoft Malware Protection Engine (Microsoft), 2 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-41091 | Microsoft Defender Elevation of Privilege Vulnerability In CISA KEValso in 1 other product | 7.8 | |
| Critical | CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability In CISA KEValso in 8 other products | 7.8 | |
| High | CVE-2026-50656 | Microsoft Defender Elevation of Privilege Vulnerability | 7.0 | |
| High | CVE-2017-0290 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-8538 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-8541 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-11937 | Microsoft Malware Protection Engine: Remote Code Execution | 7.8 | |
| High | CVE-2017-11940 | Microsoft Malware Protection Engine: Remote Code Execution | 7.8 | |
| High | CVE-2021-31985 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-42298 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | |
| Medium | CVE-2017-8537 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8536 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8535 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| High | CVE-2026-69414 | Microsoft Defender Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2023-24860 | Microsoft Defender Denial of Service Vulnerability | 7.5 | |
| High | CVE-2021-34522 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34464 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | |
| Medium | CVE-2017-8539 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8542 | Microsoft Malware Protection: Denial of Service | 5.5 | |
| Medium | CVE-2022-24548 | Microsoft Defender Denial of Service Vulnerability | 5.5 | |
| High | CVE-2026-45584 | Microsoft Defender Remote Code Execution Vulnerability | 8.1 | |
| Not rated | CVE-2006-5270 | Microsoft windows_antigen: Integer Overflow | — | |
| Not rated | CVE-2014-2779 | Microsoft Malware Protection Engine: Denial of Service | — | |
| Not rated | CVE-2008-1438 | Microsoft Malware Protection Engine: Denial of Service | — | |
| Not rated | CVE-2008-1437 | Microsoft Malware Protection Engine: Denial of Service | — |
News
- Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassedthehackernews,
- Microsoft working on Defender patch for ShieldBreak zero-daybleepingcomputer,
- Researcher creates workaround for Microsoft Defender security patchcsoonline,
- Researcher bypasses Microsoft Defender security patch, seizing controlcsoonline,
- ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Accessthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,