A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Security Essentials | unspecified |
| Microsoft | Microsoft System Center | 2012 Endpoint Protection, Endpoint Protection, 2012 R2 Endpoint Protection |
| Microsoft | Microsoft Forefront Endpoint Protection | 2010 |
| Microsoft | Windows Defender on Windows 7 for 32 | bit Systems — Service Pack 1 |
| Microsoft | Windows Defender on Windows 7 for x64 | based Systems — Service Pack 1 |
| Microsoft | Windows Defender on Windows Server 2008 R2 for x64 | based Systems (Server Core installation) — Service Pack 1 |
| Microsoft | Windows Defender on Windows Server 2008 R2 for Itanium | Based Systems — Service Pack 1 |
| Microsoft | Windows Defender on Windows Server 2008 R2 for x64 | based Systems — Service Pack 1 |
| Microsoft | Windows Defender on Windows Server 2008 for 32 | bit Systems (Server Core installation) — Service Pack 2 |
| Microsoft | Windows Defender on Windows Server 2012 | unspecified |
| Microsoft | Windows Defender on Windows Server 2012 (Server Core installation) | unspecified |
| Microsoft | Windows Defender on Windows 8.1 for 32 | bit systems — unspecified |
| Microsoft | Windows Defender on Windows 8.1 for x64 | based systems — unspecified |
| Microsoft | Windows Defender on Windows Server 2012 R2 | unspecified |
| Microsoft | Windows Defender on Windows RT 8.1 | unspecified |
| Microsoft | Windows Defender on Windows Server 2012 R2 (Server Core installation) | unspecified |
| Microsoft | Windows Defender on Windows 10 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows Server 2016 | unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1607 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1607 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows Server 2016 (Server Core installation) | unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1703 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1703 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1709 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1709 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1803 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1803 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows Server, version 1803 (Server Core Installation) | unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1803 for ARM64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1809 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1809 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1809 for ARM64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows Server 2019 | unspecified |
| Microsoft | Windows Defender on Windows Server 2019 (Server Core installation) | unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1709 for ARM64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1903 for 32 | bit Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1903 for x64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows 10 Version 1903 for ARM64 | based Systems — unspecified |
| Microsoft | Windows Defender on Windows Server, version 1903 (Server Core installation) | unspecified |
| Microsoft | Windows Defender on Windows Server 2008 for Itanium | Based Systems — Service Pack 2 |
| Microsoft | Windows Defender on Windows Server 2008 for 32 | bit Systems — Service Pack 2 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.