Malware Protection Engine vulnerabilities

4 known vulnerabilities in Malware Protection Engine from Microsoft. 4 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Malware Protection Engine: Improper Link Resolution Before File Access

  CVE-2026-69414Aug 14, 2026MicrosoftEPSS 1.37%

  Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

• 7.0 High severity

  Microsoft Malware Protection Engine: Improper Link Resolution Before File Access

  CVE-2026-50656Jun 16, 2026MicrosoftEPSS 11.2%

  Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

• 7.8 High severity

  Microsoft Defender Link Following Exploited

  CVE-2026-41091May 20, 2026MicrosoftEPSS 8.2%

  Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Microsoft Malware Protection Engine Improper Restriction of Operations Exploited

  CVE-2017-8540May 26, 2017MicrosoftEPSS 71.9%

  The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, a