Microsoft Malware Protection Engine vulnerabilities

3 known vulnerabilities in Microsoft Malware Protection Engine from Microsoft. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Malware Protection Engine: Improper Link Resolution Before File Access

  CVE-2026-69414Aug 14, 2026MicrosoftEPSS 1.37%

  Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

• 7.0 High severity

  Microsoft Malware Protection Engine: Improper Link Resolution Before File Access

  CVE-2026-50656Jun 16, 2026MicrosoftEPSS 11.2%

  Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

• 7.8 High severity

  Microsoft Defender Link Following Exploited

  CVE-2026-41091May 20, 2026MicrosoftEPSS 8.2%

  Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.