Known vulnerabilities in Microsoft Malware Protection Engine

Vendor: Microsoft
Software: Microsoft Malware Protection Engine
Software CPE: cpe:2.3:a:microsoft:microsoft_malware_protection_engine:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 25
Public exploits: 9
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Malware Protection Engine Microsoft Malware Protection Engine is affected by 25 known vulnerabilities: 1 critical, 10 high, 8 medium, 6 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143636 - Improper Access Control
CVE-2026-69414		 CWE-284 Low
No
No
 - 17.08.2026 SB2026081749
#VU138298 - Integer overflow
CVE-2026-55012		 CWE-190 High
No
No
 1.1.26060.3008 17.07.2026 SB2026071749
#VU138297 - Integer underflow
CVE-2026-55011		 CWE-191 High
No
No
 1.1.26060.3008 17.07.2026 SB2026071749
#VU135026 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50656		 CWE-59 Low
No
No
 - 22.06.2026 SB2026062250
#VU132035 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-41091		 CWE-59 High
Available
Exploited
 1.1.26040.8 21.05.2026 SB2026052118
#VU132034 - Heap-based Buffer Overflow
CVE-2026-45584		 CWE-122 Critical
No
No
 1.1.26040.8 21.05.2026 SB2026052117
#VU78176 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33156		 CWE-362 Low
No
No
 - 12.07.2023 SB2023071232
#VU75143 - Security Features
CVE-2023-24934		 CWE-254 Medium
No
No
 1.1.20200.4 15.04.2023 SB2023041502
#VU74995 - Improper input validation
CVE-2023-24860		 CWE-20 Medium
No
No
 1.1.20200.4 12.04.2023 SB2023041204
#VU73609 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-23389		 CWE-362 Low
No
No
 - 14.03.2023 SB2023031460
#VU68139 - Absolute Path Traversal
CVE-2022-37971		 CWE-36 Low
Available
No
 - 11.10.2022 SB2022101147
SB2023081011
#VU62277 - Improper input validation
CVE-2022-24548		 CWE-20 Medium
No
No
 - 13.04.2022 SB2022041309
#VU58049 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42298		 CWE-94 High
No
Exploited
 - 09.11.2021 SB2021110921
#VU55716 - Permissions, Privileges, and Access Controls
CVE-2021-34471		 CWE-264 Low
No
No
 - 10.08.2021 SB2021081027
#VU54811 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34464		 CWE-94 High
No
No
 - 13.07.2021 SB2021071363
#VU54810 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34522		 CWE-94 High
No
No
 - 13.07.2021 SB2021071363
#VU6799 - Memory corruption
CVE-2017-8538		 CWE-119 High
Available
No
 - 30.05.2017 SB2017053002
#VU6797 - Improper input validation
CVE-2017-8537		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6796 - Improper input validation
CVE-2017-8536		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6795 - Improper input validation
CVE-2017-8535		 CWE-20 Medium
Available
No
 - 26.05.2017 SB2017053002


Showing elements 1 - 20 out of 25