Product by Microsoft
Microsoft Windows Defender
29 known vulnerabilities in Microsoft Windows Defender (Microsoft), 2 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability In CISA KEValso in 8 other products | 7.8 | |
| Critical | CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability In CISA KEValso in 2 other products | 7.8 | |
| High | CVE-2018-0986 | Microsoft Windows Defender: Memory Corruption | 8.8 | |
| High | CVE-2017-0290 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-8538 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-8541 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2017-8558 | Microsoft Malware Protection Engine: Memory Corruption | 7.8 | |
| High | CVE-2019-1255 | Microsoft System Center: Denial of Service | 7.5 | |
| Medium | CVE-2017-8537 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8536 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8535 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8539 | Microsoft Malware Protection Engine: Denial of Service | 5.5 | |
| Medium | CVE-2017-8542 | Microsoft Malware Protection: Denial of Service | 5.5 | |
| High | CVE-2020-1170 | Microsoft Forefront Endpoint Protection: Privilege Escalation | 7.8 | |
| Not rated | CVE-2006-5270 | Microsoft windows_antigen: Integer Overflow | — | |
| Not rated | CVE-2008-1438 | Microsoft Malware Protection Engine: Denial of Service | — | |
| Not rated | CVE-2008-1437 | Microsoft Malware Protection Engine: Denial of Service | — | |
| Medium | CVE-2026-70264 | Microsoft Defender Information Disclosure Vulnerability | 5.5 | |
| High | CVE-2023-36422 | Microsoft Windows Defender Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2020-0835 | Microsoft Windows Defender: Privilege Escalation | 7.8 | |
| High | CVE-2020-1163 | Microsoft Forefront Endpoint Protection: Privilege Escalation | 7.8 | |
| High | CVE-2019-1161 | Microsoft Defender Elevation of Privilege Vulnerability | 7.1 | |
| High | CVE-2020-1461 | Microsoft Forefront Endpoint Protection: Privilege Escalation | 7.1 | |
| High | CVE-2023-38175 | Microsoft Windows Defender Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2020-1002 | Microsoft Forefront Endpoint Protection: Privilege Escalation | 7.1 |