Microsoft Defender contains an unspecified vulnerability that allows for denial of service.

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.