Microsoft System Center Endpoint Protection — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft System Center Endpoint Protection, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2018-0986 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file…
• CVE-2020-1163 — CVSS 7.8 (high): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
• CVE-2021-24092 — CVSS 7.8 (high): Microsoft Defender Elevation of Privilege Vulnerability
• CVE-2021-1647 — CVSS 7.8 (high) — actively exploited: Microsoft Defender Remote Code Execution Vulnerability
• CVE-2017-8540 — CVSS 7.8 (high) — actively exploited: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2020-1170 — CVSS 7.8 (high): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
• CVE-2019-1255 — CVSS 7.5 (high): A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service…
• CVE-2020-1002 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…
• CVE-2019-1161 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit…
• CVE-2020-1461 — CVSS 7.1 (high): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…
• CVE-2017-8535 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2017-8537 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…
• CVE-2017-8536 — CVSS 5.5 (medium): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…