Microsoft Security Essentials — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Security Essentials, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (20)

• CVE-2018-0986 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file…
• CVE-2021-24092 — CVSS 7.8 (high): Microsoft Defender Elevation of Privilege Vulnerability
• CVE-2017-8540 — CVSS 7.8 (high) — actively exploited: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2017-8558 — CVSS 7.8 (high): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows…
• CVE-2020-1163 — CVSS 7.8 (high): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
• CVE-2020-1170 — CVSS 7.8 (high): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
• CVE-2021-1647 — CVSS 7.8 (high) — actively exploited: Microsoft Defender Remote Code Execution Vulnerability
• CVE-2019-1255 — CVSS 7.5 (high): A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service…
• CVE-2011-0037 — CVSS 7.2 (high): Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender…
• CVE-2019-1161 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit…
• CVE-2020-1461 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…
• CVE-2020-1002 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…
• CVE-2017-8535 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2017-8537 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2017-8536 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2012-1443 — CVSS 4.3 (medium): The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine…
• CVE-2012-1453 — CVSS 4.3 (medium): The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0…
• CVE-2012-1457 — CVSS 4.3 (medium): The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
• CVE-2012-1459 — CVSS 4.3 (medium): The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus…
• CVE-2012-1420 — CVSS 4.3 (medium): The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus…