malware_protection_engine vulnerabilities

CVEs whose affected-version data names the malware_protection_engine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-69414High· 7.8PoC

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

▾ MidnightMicrosoft · Microsoft Malware Protection EngineEPSS 0.56%via CVEORG

CVE-2026-55012High· 7.8

Microsoft Defender Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft Malware Protection EngineEPSS 0.37%via CVEORG

CVE-2026-55011High· 7.8

Microsoft Defender Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft Malware Protection EngineEPSS 0.37%via CVEORG

CVE-2026-45584High· 8.1PoC

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

▾ Midnightmicrosoft · malware_protection_engineEPSS 0.85%via NVD

CVE-2021-34522High· 7.8

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

▾ Twilightmicrosoft · malware_protection_engineEPSS 2.7%via NVD

malware_protection_engine vulnerabilities (CVEs) · VulnSea