Sploitus

3 exploited vulnerabilities in Defender For Endpoint

Vulnerabilities with publicly known exploits

Vendors
Microsoft, Intel, Palo Alto Networks, Sentinelone
With known exploits
3
Affected Microsoft Windows 10 1507 versions
< 10.0.10240.19060
Affected Microsoft Windows 10 1607 versions
< 10.0.14393.4651
Affected Microsoft Windows 10 1809 versions
< 10.0.17763.2183
Affected Microsoft Windows 10 1909 versions
< 10.0.18363.1801
Affected Microsoft Windows 10 2004 versions
< 10.0.19041.1237
Affected Microsoft Windows 10 20h2 versions
< 10.0.19042.1237
Affected Microsoft Windows 10 21h1 versions
< 10.0.19043.1237
Affected Microsoft Windows 7 versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2021-40444 38 exploits
CVSS 9.0 HIGH 2021-09-07FIX AVAILABLE
Exploit for Reliance on Untrusted Inputs in a Security Decision in MicrosoftExploit for Path Traversal in Microsoft
CVE-2025-47161 2 exploits
CVSS 7.8 HIGH 2025-05-15
📄 Microsoft Defender for Endpoint Privilege EscalationMicrosoft Defender for Endpoint (MDE) - Elevation of Privilege
CVE-2015-2291 7 exploits
CVSS 7.2 HIGH 2014-06-10FIX AVAILABLE
Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.SysExploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys