Microsoft Windows Defender For Endpoint vulnerabilities

2 CVEs affecting Microsoft Windows Defender For Endpoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29800, published 2022-09-21.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-29799, published 2022-09-21. Medium severity, CVSS 5.5. EPSS: 11.8% chance of exploitation in the next 30 days. A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a…
• CVE-2022-29800, published 2022-09-21. Medium severity, CVSS 4.7. EPSS: 7.2% chance of exploitation in the next 30 days. A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them…