Microsoft Microsoft Malware Protection Engine

Name: Microsoft Microsoft Malware Protection Engine
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical6high4medium1low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-41091US	—OT critical	8.20% (95th)	KEV	1.1.26040.8	2026-05-20	3 versions
CVE-2026-50656US	high7.0	11.2% (96th)	Exploit	1.1.26060.3008	2026-06-16	3 versions
CVE-2026-69414US	—	1.32% (71st)	Exploit	1.1.26080.3	2026-08-14	3 versions
CVE-2026-45584US	—	0.85% (58th)	Exploit	1.1.26040.8	2026-05-20	3 versions
CVE-2026-50657US	medium5.5	0.40% (34th)	Exploit	no fix	2026-07-14	≤ vers:unknown/*
CVE-2021-31985US	medium6.8	7.76% (95th)	—	Version 1.1.18200.3	2021-06-08	1.1.0.0 → Version 1.1.18200.3
CVE-2021-42298US	high9.3	5.85% (93rd)	—	1.1.18700.3	2021-11-10	1.1.0.0 → 1.1.18700.3
CVE-2023-24860US	—	3.07% (88th)	—	1.1.20200.4	2023-04-11	1.1.0.0 → 1.1.20200.4
CVE-2022-24548US	medium4.3	3.01% (87th)	—	1.1.19100.5	2022-04-15	1.1.0.0 → 1.1.19100.5
CVE-2021-34522US	high9.3	2.72% (86th)	—	1.1.18242.0	2021-07-14	1.1.0.0 → 1.1.18242.0
CVE-2021-34464US	high9.3	2.64% (86th)	—	1.1.18242.0	2021-07-16	1.1.0.0 → 1.1.18242.0
CVE-2021-31978US	low2.1	1.23% (69th)	—	Version 1.1.18200.3	2021-06-08	1.1.0.0 → Version 1.1.18200.3
CVE-2022-37971US	—	0.70% (53rd)	—	1.1.19700.2	2022-10-11	1.1.0.0 → 1.1.19700.2
CVE-2021-34471US	medium4.6	0.51% (43rd)	—	1.1.18400.4	2021-08-12	1.1.0.0 → 1.1.18400.4
CVE-2026-55012US	—	0.47% (40th)	—	1.1.26060.3008	2026-07-14	4 versions
CVE-2026-55011US	—	0.47% (40th)	—	1.1.26060.3008	2026-07-14	4 versions
CVE-2023-33156US	high7.0	0.27% (20th)	—	1.1.23050.3	2023-07-11	1.1.0.0 → 1.1.23050.3
CVE-2023-23389US	—	0.26% (17th)	—	1.1.20000.2	2023-03-14	1.1.0.0 → 1.1.20000.2
CVE-2026-56178US	high7.0	0.23% (14th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50658US	—	0.20% (10th)	—	no fix	2026-07-14	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)17 CVEs
USMicrosoft MSRC (CSAF)6 CVEs
NLNCSC-NL (CSAF)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan