Microsoft Defender Antimalware Platform
Monthly
Denial of service in Microsoft Defender Antimalware Platform lets remote unauthenticated attackers exhaust resources and crash or hang the anti-malware engine, disabling real-time protection on affected Windows hosts. The flaw is confirmed actively exploited (CISA KEV) with publicly available exploit code, and while its EPSS score is a moderate 2.27% (85th percentile), the KEV listing makes it a priority. Loss of the endpoint's primary anti-malware service creates a window for follow-on intrusion.
Privilege escalation in Microsoft Defender Antimalware Platform versions before 4.18.26030.3011 allows authenticated local attackers to gain elevated system privileges through insufficiently granular access controls. CVSS 7.8 (High) reflects local attack vector requiring low privileges. EPSS score of 0.04% (12th percentile) indicates low probability of widespread exploitation. Microsoft has released a patched version (4.18.26030.3011) addressing the access control deficiency.
Denial of service in Microsoft Defender Antimalware Platform lets remote unauthenticated attackers exhaust resources and crash or hang the anti-malware engine, disabling real-time protection on affected Windows hosts. The flaw is confirmed actively exploited (CISA KEV) with publicly available exploit code, and while its EPSS score is a moderate 2.27% (85th percentile), the KEV listing makes it a priority. Loss of the endpoint's primary anti-malware service creates a window for follow-on intrusion.
Privilege escalation in Microsoft Defender Antimalware Platform versions before 4.18.26030.3011 allows authenticated local attackers to gain elevated system privileges through insufficiently granular access controls. CVSS 7.8 (High) reflects local attack vector requiring low privileges. EPSS score of 0.04% (12th percentile) indicates low probability of widespread exploitation. Microsoft has released a patched version (4.18.26030.3011) addressing the access control deficiency.