Windows Defender
31 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Windows Defender, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Windows Defender CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 31 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High21
- Medium9
Latest CVEs
The 15 most recently published vulnerabilities affecting Windows Defender.
- CVE-2024-20671Microsoft Defender Security Feature Bypass Vulnerability5.5
- CVE-2023-36422Microsoft Windows Defender Elevation of Privilege Vulnerability7.8
- CVE-2023-38175Microsoft Windows Defender Elevation of Privilege Vulnerability7.8
- CVE-2021-34522Microsoft Defender Remote Code Execution Vulnerability7.8
- CVE-2021-24092Microsoft Defender Elevation of Privilege Vulnerability7.8
- CVE-2021-1647Microsoft Defender Remote Code Execution Vulnerability7.8
- CVE-2020-1461An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on t...7.1
- CVE-2020-1163An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the syste...7.8
- CVE-2020-1170An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the syste...7.8
- CVE-2020-1002An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on t...7.1
- CVE-2020-0835An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege ...7.8
- CVE-2019-1255A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.7.5
- CVE-2019-1161Microsoft Defender Elevation of Privilege Vulnerability7.1
- CVE-2018-0986A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Prote...8.8
- CVE-2017-11937The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows ...7.8
Product grouping is registry-driven, with AI assist and human review. How it works