Known vulnerabilities in Windows Defender

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 11
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Defender Windows Defender is affected by 31 known vulnerabilities: 1 critical, 11 high, 9 medium, 10 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132036 - Improper input validation
CVE-2026-45498
CWE-20 High
No
Exploited
4.18.26040.7 21.05.2026 SB2026052119
#VU126208 - Insufficient Granularity of Access Control
CVE-2026-33825
CWE-1220 High
Available
Exploited
4.18.26030.3011 15.04.2026 SB20260415129
#VU87472 - Security Features
CVE-2024-20671
CWE-254 Low
Available
No
- 12.03.2024 SB20240312360
#VU83049 - Permissions, Privileges, and Access Controls
CVE-2023-36422
CWE-264 Low
No
No
4.18.23100.2009 14.11.2023 SB2023111434
#VU79141 - Permissions, Privileges, and Access Controls
CVE-2023-38175
CWE-264 Low
No
No
1.1.23060.3001 08.08.2023 SB2023080860
#VU75143 - Security Features
CVE-2023-24934
CWE-254 Medium
No
No
1.387.1114.0 15.04.2023 SB2023041502
#VU72220 - Security Features
CVE-2023-21809
CWE-254 Medium
No
No
- 15.02.2023 SB2023021506
#VU53916 - Improper input validation
CVE-2021-31978
CWE-20 Medium
No
No
- 08.06.2021 SB2021060834
#VU53915 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31985
CWE-94 High
No
No
- 08.06.2021 SB2021060834
#VU50489 - Permissions, Privileges, and Access Controls
CVE-2021-24092
CWE-264 Low
No
No
- 09.02.2021 SB2021020946
#VU49401 - Improper input validation
CVE-2021-1647
CWE-20 Critical
Available
Exploited
- 12.01.2021 SB2021011213
#VU29792 - Memory corruption
CVE-2020-1461
CWE-119 Low
No
No
- 14.07.2020 SB2020071441
#VU28867 - Permissions, Privileges, and Access Controls
CVE-2020-1170
CWE-264 Low
No
No
- 09.06.2020 SB2020060936
#VU28866 - Permissions, Privileges, and Access Controls
CVE-2020-1163
CWE-264 Low
No
Exploited
- 09.06.2020 SB2020060936
#VU26881 - Windows hard link
CVE-2020-0835
CWE-65 Low
No
No
4.18.2001.112 14.04.2020 SB2020041438
#VU26846 - Permissions, Privileges, and Access Controls
CVE-2020-1002
CWE-264 Medium
No
No
- 14.04.2020 SB2020041415
#VU21290 - Improper input validation
CVE-2019-1255
CWE-20 Low
No
No
- 23.09.2019 SB2019092317
#VU20281 - Permissions, Privileges, and Access Controls
CVE-2019-1161
CWE-264 Low
No
No
- 14.08.2019 SB2019081412
#VU11501 - Memory corruption
CVE-2018-0986
CWE-119 High
No
No
- 03.04.2018 SB2018040403
#VU9598 - Memory corruption
CVE-2017-11940
CWE-119 High
No
No
- 08.12.2017 SB2017120701


Showing elements 1 - 20 out of 31