Microsoft Malware Protection Engine vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Malware Protection Engine: 6 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:malware_protection_engine

CVE-2026-55012 High · 7.8 CWE-122 Jul 14, 2026

Heap-based Buffer Overflow in Microsoft Malware Protection Engine

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVE-2026-55011 High · 7.8 CWE-191 Jul 14, 2026

Integer Underflow in Microsoft Malware Protection Engine

Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVE-2026-50656 High · 7.0 CWE-59 Jun 16, 2026

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVE-2026-45584 High · 8.1 CWE-122 May 20, 2026

Microsoft Defender Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

CVE-2026-41091 High · 7.8 KEV High · 53 Public exploit CWE-59 May 20, 2026

Microsoft Defender Link Following Vulnerability

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2017-8540 High · 7.8 KEV High · 64 Public exploit CWE-787 May 26, 2017

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541.