Microsoft Antispyware vulnerabilities

2 CVEs affecting Microsoft Antispyware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-2940, published 2005-11-18.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-2940, published 2005-11-18. High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the…
• CVE-2005-2935, published 2005-09-15. Medium severity, CVSS 4.6. EPSS: 1.9% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts…