Microsoft Endpoint Protection vulnerabilities

6 CVEs affecting Microsoft Endpoint Protection, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-24092, published 2021-02-25.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8540: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability, published 2017-05-26. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 71.9% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2017-8558, published 2017-06-29. High severity, CVSS 7.8. EPSS: 43.6% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
• CVE-2017-8537, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2017-8536, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2017-8535, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2021-24092, published 2021-02-25. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Microsoft Defender Elevation of Privilege Vulnerability