Microsoft Malware Protection Engine vulnerabilities

CVE-2026-41091 [HIGH] CWE-59 CVE-2026-41091: Improper link resolution before file access ('link following') in Microsoft Defender allows an autho Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2021-42298 [HIGH] CWE-94 CVE-2021-42298: Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability

CVE-2021-31985 [HIGH] CVE-2021-31985: Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability

CVE-2026-45584 [HIGH] CWE-122 CVE-2026-45584: Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code ove Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

CVE-2026-55011 [HIGH] CWE-191 CVE-2026-55011: Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to exec Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVE-2026-55012 [HIGH] CWE-122 CVE-2026-55012: Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVE-2026-50656 [HIGH] CWE-59 CVE-2026-50656: Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVE-2021-34464 [HIGH] CVE-2021-34464: Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability

CVE-2021-34522 [HIGH] CVE-2021-34522: Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability

CVE-2021-34471 [HIGH] CWE-269 CVE-2021-34471: Microsoft Windows Defender Elevation of Privilege Vulnerability Microsoft Windows Defender Elevation of Privilege Vulnerability

CVE-2023-24860 [HIGH] CWE-400 CVE-2023-24860: Microsoft Defender Denial of Service Vulnerability Microsoft Defender Denial of Service Vulnerability

CVE-2023-33156 [HIGH] CWE-367 CVE-2023-33156: Microsoft Defender Elevation of Privilege Vulnerability Microsoft Defender Elevation of Privilege Vulnerability

CVE-2022-37971 [HIGH] CVE-2022-37971: Microsoft Windows Defender Elevation of Privilege Vulnerability Microsoft Windows Defender Elevation of Privilege Vulnerability

CVE-2023-23389 [MEDIUM] CWE-367 CVE-2023-23389: Microsoft Defender Elevation of Privilege Vulnerability Microsoft Defender Elevation of Privilege Vulnerability

CVE-2022-24548 [MEDIUM] CVE-2022-24548: Microsoft Defender Denial of Service Vulnerability Microsoft Defender Denial of Service Vulnerability

CVE-2021-31978 [MEDIUM] CVE-2021-31978: Microsoft Defender Denial of Service Vulnerability Microsoft Defender Denial of Service Vulnerability