VULNERABILITY INTELLIGENCE

CVE-2011-0037

CVSS score7.2 HIGH
EPSS probability1.78%
CISA KEVNot currently listed
Published2011-02-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references