microsoft forefront security vulnerabilities and exploits

(subscribe to this query)

NA

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent malicious users to cause a denial of service (disk space exhaustion) via a file with "crafted data stru...

Microsoft Malware Protection Engine 1.1.3520.0 Microsoft Windows Defender Microsoft Diagnostics And Recovery Toolkit 6.0 Microsoft Forefront Client Security Microsoft Forefront Security For Exchange Server Microsoft Forefront Security For Sharepoint Microsoft Malware Protection Engine 0.1.13.192 Microsoft Antigen For Exchange Microsoft Antigen For Smtp Gateway Microsoft Windows Live Onecare

NA

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent malicious users to cause a denial of service (engine hang and restart) via a crafted file, a different vulne...

Microsoft Forefront Security For Exchange Server Microsoft Forefront Security For Sharepoint Microsoft Antigen For Exchange Microsoft Antigen For Smtp Gateway Microsoft Windows Defender Microsoft Windows Live Onecare Microsoft Diagnostics And Recovery Toolkit 6.0 Microsoft Forefront Client Security Microsoft Malware Protection Engine 0.1.13.192 Microsoft Malware Protection Engine 1.1.3520.0

7.8

CVSSv3

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 doe...

Microsoft Windows Defender -Microsoft Security Essentials -Microsoft Forefront Endpoint Protection -Microsoft Forefront Endpoint Protection 2010 Microsoft Windows Intune Endpoint Protection -Microsoft Endpoint Protection -

1 EDB exploit

NA

Microsoft Malware Protection Engine prior to 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privile...

Microsoft Windows Defender Microsoft Forefront Client Security Microsoft Malware Protection Engine 1.1.3520.0 Microsoft Malware Protection Engine Microsoft Windows Live Onecare Microsoft Security Essentials Microsoft Forefront Endpoint Protection 2010 -Microsoft Malware Protection Engine 0.1.13.192 Microsoft Malicious Software Removal Tool

NA

The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, whic...

Microsoft Internet Security And Acceleration Server 2004 Microsoft Forefront Threat Management Gateway -Microsoft Internet Security And Acceleration Server 2006

NA

Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 200...

Microsoft Internet Security And Acceleration Server 2006 Microsoft Forefront Threat Management Gateway -Microsoft Internet Security And Acceleration Server 2004

NA

Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote malicious users to execute arbitrary code via a crafted PDF file.

Microsoft Antigen Microsoft Forefront Security Microsoft Malware Protection Engine Microsoft Windows Defender Microsoft Windows Live Onecare

7.8

CVSSv3

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'....

Microsoft Windows Defender -Microsoft Forefront Endpoint Protection 2010 -Microsoft Security Essentials -Microsoft System Center Endpoint Protection 2012

1 Github repository

7.8

CVSSv3

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'....

Microsoft Windows Defender -Microsoft Forefront Endpoint Protection 2010 -Microsoft Security Essentials -Microsoft System Center Endpoint Protection 2012

5.5

CVSSv3

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 20...

Microsoft Windows Defender -Microsoft Endpoint Protection -Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Forefront Endpoint Protection -Microsoft Forefront Endpoint Protection 2010 Microsoft Security Essentials -Microsoft System Center Endpoint Protection -Microsoft Windows Intune Endpoint Protection

1 EDB exploit1 Article

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook