CVE-2011-0037: Microsoft Forefront Client Security

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Affected products

• Microsoft Forefront Client Security: any version
• Microsoft Forefront Endpoint Protection 2010: affected versions not specified
• Microsoft Malicious Software Removal Tool: any version
• Microsoft Malware Protection Engine: up to and including 1.1.6502.0; version 0.1.13.192 only; version 1.1.3520.0 only
• Microsoft Security Essentials: any version
• Microsoft Windows Defender: any version
• Microsoft Windows Live Onecare: any version

Published 2011-02-25. Last modified 2026-06-16.