CVE-2011-0037

published 2011-02-25

CVE-2011-0037: Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials…

Priority P4 32 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	malware_protection_engine	<= 1.1.6502.0	—
microsoft	malware_protection_engine	—	—
microsoft	malware_protection_engine	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20