Microsoft Security Essentials vulnerabilities

20 CVEs affecting Microsoft Security Essentials, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-24092, published 2021-02-25.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8540: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability, published 2017-05-26. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 71.9% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
• CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability, published 2021-01-12. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 39.7% chance of exploitation in the next 30 days. Microsoft Defender Remote Code Execution Vulnerability
• CVE-2012-1459, published 2012-03-21. Medium severity, CVSS 4.3. EPSS: 99.8% chance of exploitation in the next 30 days. The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190,…
• CVE-2012-1443, published 2012-03-21. Medium severity, CVSS 4.3. EPSS: 99.6% chance of exploitation in the next 30 days. The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command…
• CVE-2012-1457, published 2012-03-21. Medium severity, CVSS 4.3. EPSS: 98.3% chance of exploitation in the next 30 days. The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal)…
• CVE-2012-1453, published 2012-03-21. Medium severity, CVSS 4.3. EPSS: 97.7% chance of exploitation in the next 30 days. The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly…
• CVE-2012-1420, published 2012-03-21. Medium severity, CVSS 4.3. EPSS: 97.1% chance of exploitation in the next 30 days. The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus…
• CVE-2018-0986, published 2018-04-04. High severity, CVSS 8.8. EPSS: 63.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware…
• CVE-2017-8558, published 2017-06-29. High severity, CVSS 7.8. EPSS: 43.6% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
• CVE-2017-8537, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…

Latest

• CVE-2021-24092, published 2021-02-25. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Microsoft Defender Elevation of Privilege Vulnerability
• CVE-2020-1461, published 2020-07-14. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to…
• CVE-2020-1170, published 2020-06-09. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system,…
• CVE-2020-1163, published 2020-06-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system,…
• CVE-2020-1002, published 2020-04-15. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to…
• CVE-2019-1255, published 2019-09-23. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
• CVE-2019-1161, published 2019-08-14. High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to…