Microsoft Microsoft Security Essentials

9 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-24092N/AMicrosoft Defender Elevation of Privilege VulnerabilityHIGH 7.80.6 %
CVE-2021-1647N/AMicrosoft Defender Remote Code Execution VulnerabilityHIGH 7.840 %KEV
CVE-2020-1461unspecifiedAn elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit thHIGH 7.10.8 %
CVE-2020-1170unspecifiedAn elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabiHIGH 7.81.6 %
CVE-2020-1163unspecifiedAn elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabiHIGH 7.80.9 %
CVE-2020-1002unspecifiedAn elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit thHIGH 7.10.7 %
CVE-2019-1255unspecifiedA denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service VulneraHIGH 7.54.1 %
CVE-2019-1161N/AMicrosoft Defender Elevation of Privilege VulnerabilityHIGH 7.11.0 %
CVE-2018-0986Microsoft Security EssentialsA remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, lHIGH 8.863 %