7.8
High
CVE-2026-55011 Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally
Description
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Malware Protection Engine 1.1 | 1.1.0.0 → < 1.1.26060.3008 | 1.1.26060.3008 |
References
- Microsoft Defender Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Malware Protection Engine
The 17 CVEs of Microsoft Malware Protection Engine →
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender…
7.8
High
CVE-2026-55012
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally
7.8
High
CVE-2026-50656
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender…
7.8
High
CVE-2026-45584
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network
8.1
High