Microsoft Defender Denial of Service Vulnerability

Microsoft Defender can be made to stop working properly when it processes specially crafted files, leaving your computer unprotected. An attacker can exploit this to disable your antivirus temporarily.

A resource exhaustion vulnerability (CWE-400) in Microsoft Defender's file processing engine allows an unauthenticated local attacker to trigger excessive resource consumption through maliciously crafted input files, resulting in denial of service. The attack vector is local file processing, requiring no elevated privileges but direct interaction with the affected component.