What’s Vulnerable › Products
Microsoft Malware Protection Engine vulnerabilities
31 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Microsoft Malware Protection Engine version is affected
Exploited Microsoft Malware Protection Engine vulnerabilities
- CVE-2026-41091 — Microsoft Defender Link Following Vulnerability
- CVE-2017-8540 — Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Latest Microsoft Malware Protection Engine vulnerabilities
- CVE-2026-69414 — Microsoft Defender Elevation of Privilege Vulnerability (CVSS 7.8)
- CVE-2026-55012 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-55011 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-50656 — Microsoft Defender Elevation of Privilege Vulnerability (CVSS 7.0)
- CVE-2026-45584 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 8.1)
- CVE-2026-41091 — Microsoft Defender Link Following Vulnerability (CVSS 7.8) — exploited
- CVE-2023-33156 — Microsoft Defender Elevation of Privilege Vulnerability (CVSS 7.0)
- CVE-2023-24860 — Microsoft Defender Denial of Service Vulnerability (CVSS 7.5)
- CVE-2023-23389 — Microsoft Defender Elevation of Privilege Vulnerability (CVSS 6.3)
- CVE-2022-37971 — Microsoft Windows Defender Elevation of Privilege Vulnerability (CVSS 7.1)
- CVE-2022-24548 — Microsoft Defender Denial of Service Vulnerability (CVSS 4.3)
- CVE-2021-42298 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 9.3)
- CVE-2021-34471 — Microsoft Defender Elevation of Privilege Vulnerability (CVSS 4.6)
- CVE-2021-34464 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 9.3)
- CVE-2021-34522 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 9.3)
- CVE-2021-31985 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 6.8)
- CVE-2021-31978 — Microsoft Defender Denial of Service Vulnerability (CVSS 2.1)
- CVE-2017-11940 — (CVSS 7.8)
- CVE-2017-11937 — (CVSS 7.8)
- CVE-2017-8542 — (CVSS 5.5)
- CVE-2017-8541 — (CVSS 7.8)
- CVE-2017-8540 — Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability (CVSS 7.8) — exploited
- CVE-2017-8539 — (CVSS 5.5)
- CVE-2017-8538 — (CVSS 7.8)
- CVE-2017-0290 — (CVSS 7.8)