Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Microsoft

Microsoft Windows Defender vulnerabilities

5 published CVEs name Microsoft Windows Defender among the affected products; CISA lists 1 of them as exploited in the wild.

Published CVEs
5
Last 12 months
1
Critical
0
Known exploited
1

Critical 0High 4Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20181
  2. 20191
  3. 20212
  4. 20261

Known exploitedNewest addition to KEV first

  • CVE-2021-1647

    Microsoft Defender Remote Code Execution Vulnerability

    Microsoft · Microsoft System Center Endpoint Protection

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-70264

    Microsoft Defender Information Disclosure Vulnerability

    Microsoft · Windows Defender

    Medium5.5
  • CVE-2021-24092

    Microsoft Defender Elevation of Privilege Vulnerability

    Microsoft · Microsoft Endpoint Protection

    High7.8
  • CVE-2021-1647

    Microsoft Defender Remote Code Execution Vulnerability

    Microsoft · Microsoft System Center Endpoint Protection

    ExploitedHigh7.8
  • CVE-2019-1161

    Microsoft Defender Elevation of Privilege Vulnerability

    Microsoft · Microsoft Forefront Endpoint Protection 2010

    High7.1
  • CVE-2018-0986

    A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory…

    Microsoft · Windows Defender

    High8.8