CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Defender Remote Code Execution Vulnerability (CVE-2021-1647) Security Advisory
[Affected Scope] All Windows systems running Microsoft Malware Protection Engine (MpEngine) versions prior to 1.1.17700.4
[Impact] Attackers can execute arbitrary code with SYSTEM privileges and fully compromise the host by placing a crafted file that triggers automatic scanning by Defender
[Mitigation] Immediately update the Microsoft Defender engine to version 1.1.17700.4 or higher and verify that automatic updates are enabled
Microsoft Malware Protection Engine Remote Code Execution Vulnerability (CVE-2017-8540) Analysis and Mitigation Guide
[Affected Scope] Windows Client/Server and Exchange Server environments running Windows Defender or Forefront with active scanning
[Impact] Memory corruption leading to arbitrary code execution under Local System privileges when scanning a specially crafted file
[Mitigation] Immediately update the Microsoft Malware Protection Engine to version 1.1.13804.0 or higher