CVE-2013-0078: Microsoft Windows Defender

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."

Affected products

• Microsoft Windows Defender: any version

Published 2013-04-09. Last modified 2026-06-16.