CVE-2017-8540 — Actively Exploited: Malware Protection Engine (Microsoft)

Name: CVE-2017-8540 — Actively Exploited: Malware Protection Engine (Microsoft)
Creator: ExploitWatch

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2

CVE ID	CVE-2017-8540
Vendor	Microsoft
Product	Malware Protection Engine
Vulnerability name	Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Date added	2022-03-03
Remediation due	2022-03-24
Known ransomware use	Unknown
Required action	Apply updates per vendor instructions.
Description	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruptio
Source	CISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →

$1499/mo

Try ExploitWatch →