Microsoft Windows Live Onecare vulnerabilities

4 CVEs affecting Microsoft Windows Live Onecare, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0037, published 2011-02-25.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-5270, published 2007-02-13. High severity, CVSS 9.3. EPSS: 30.3% chance of exploitation in the next 30 days. Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to…
• CVE-2008-1437, published 2008-05-13. Medium severity, CVSS 5.0. EPSS: 12.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial…
• CVE-2008-1438, published 2008-05-13. Medium severity, CVSS 5.0. EPSS: 12.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial…
• CVE-2011-0037, published 2011-02-25. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront…