Memory corruption

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

Symantec Protection Engine Security Vulnerability

Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...

CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

CVE-2023-23958

The CVE-2023-23958 issue affects Symantec Protection Engine, with versions prior to 9.1.0. The root cause is a Hash Leak vulnerability that may allow exposure of sensitive information to an unauthorized actor. Impact is described as exposure of confidential data, with no explicit exploit details ...

CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

PT-2023-19324 · Symantec · Symantec Protection Engine

Name of the Vulnerable Software and Affected Versions: Symantec Protection Engine versions prior to 9.1.0 Description: The issue may allow sensitive information to be exposed to an unauthorized actor due to a Hash Leak. Recommendations: For Symantec Protection Engine versions prior to 9.1.0, upda...

CVE-2023-23958: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

Security Updates for Windows Defender (July 2023)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23050.3. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...

KLA50772 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-33156 Exploitation Related products Windows-Defender CVE list CVE-2023-33156 high KB list Solution Install necessary update...

PT-2023-2750 · Microsoft · Malware Protection Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Microsoft Defender affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Malware Protection Engine...

Security Updates for Windows Defender (April 2023)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.20200.4. It is, therefore, affected by a denial of service vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...

The vulnerability of the Microsoft Malware Protection Engine’s security module allows attackers to enhance their privileges within the system.

The vulnerability of the Microsoft Malware Protection Engine arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

KLA48556 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-23389 Exploitation Related products Microsoft-Defender-for-Endpoint-for-Windows CVE list CVE-2023-23389 high KB list Soluti...

PT-2023-1779 · Microsoft · Defender

Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Defender. It is caused by synchronization errors when using a shared resource in the Microsoft Malwar...

PT-2022-5633 · Microsoft · Malware Protection Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Defender affected versions not specified Description: The issue is related to the Microsoft Malware Protection Engine MPE and is associated with insufficient access control. Exploitation of this issue may allow an attacker t...

KLA20003 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-37971 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Defender-for-Endpoint-for-Windo...

The vulnerability of the Microsoft Malware Protection Engine’s protection module against malicious programs arises from the execution of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

VulnCheck KEV: CVE-2017-8540

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to errors in code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to errors in code generation management. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

Vulnerability fixed in Microsoft Malware Protection Engine

Microsoft has fixed a vulnerability in the Microsoft Malware Protection Engine as used by Windows Defender and Microsoft System Center Endpoint Protection. The vulnerabilities allow a malicious person to execute arbitrary code. The following table lists the vulnerabilities...