Windows Defender

5 results · Feed

• Medium 5.5
  CVE-2026-70264

  Microsoft Defender Information Disclosure Vulnerability

  Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

  Microsoft Windows Defender Windows
  Oct 13, 2026
• High 7.8
  CVE-2021-24092 Public exploit

  Microsoft Defender Elevation of Privilege Vulnerability

  Microsoft Defender Elevation of Privilege Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Feb 25, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• Unscored —
  CVE-2019-1161

  Microsoft Defender Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted …

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Aug 14, 2019
• Unscored —
  CVE-2018-0986 Public exploit EPSS 63%

  A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a spec…

  Microsoft Microsoft Exchange Server Microsoft Security Essentials Microsoft Forefront Endpoint Protection Windows
  Apr 4, 2018