Microsoft Forefront Endpoint Protection 2010 vulnerabilities

8 CVEs affecting Microsoft Forefront Endpoint Protection 2010, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1461, published 2020-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0986, published 2018-04-04. High severity, CVSS 8.8. EPSS: 63.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware…
CVE-2019-1255, published 2019-09-23. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
CVE-2011-0037, published 2011-02-25. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront…
CVE-2020-1170, published 2020-06-09. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system,…
CVE-2019-1161, published 2019-08-14. High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to…
CVE-2020-1163, published 2020-06-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system,…
CVE-2020-1461, published 2020-07-14. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to…
CVE-2020-1002, published 2020-04-15. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to…