Microsoft Defender vulnerabilities

Remote code execution vulnerability in Microsoft Defender. An attacker could exploit this vulnerability to execute arbitrary code on the system.

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. The flaw results from reading data beyond the intended memory boundary.

A Time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

In Microsoft Defender, exposure of private personal information to an unauthorized actor allows an authorized attacker to disclose information locally.

An integer overflow or wraparound vulnerability has been discovered in Microsoft Defender. This flaw allows an unauthorized attacker to execute code locally.

An integer underflow (wrap or wraparound) vulnerability in Microsoft Defender allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

A vulnerability in Microsoft Defender allows for elevation of privilege, potentially leading to unauthorized access to the system.

Elevation of privilege vulnerability in Microsoft Defender. An attacker could exploit it to gain elevated privileges.

A vulnerability in Microsoft Defender allows remote code execution (RCE).

A vulnerability in Microsoft Defender allows remote code execution (RCE).

An elevation of privilege vulnerability exists when MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system.