Heap-based Buffer Overflow in Microsoft Defender by Microsoft
CVE-2026-45584

8.1HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Malware Protection Engine
Vendor
CVE Published:
20 May 2026

What is CVE-2026-45584?

A heap-based buffer overflow vulnerability in Microsoft Defender could allow unauthorized attackers to execute arbitrary code over a network. This flaw arises from inadequate validation of input data, making it susceptible to exploitation if proper measures are not implemented. Users are advised to apply the latest security patch provided by Microsoft to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft Malware Protection Engine -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.