This vulnerability is a heap-based buffer overflow in Microsoft Malware Protection Engine, specifically in Microsoft Defender. It enables remote code execution by an unauthorized attacker over a network. The issue affects version 1.1.0.0 of the product. Microsoft has published an official fix to remediate this vulnerability. The CVSS 3.1 vector indicates the attack requires network access with high attack complexity and no privileges or user interaction, resulting in high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on the affected system, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

An official fix is available from Microsoft. Users and administrators should apply the provided patch from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.