CVE-2017-0290

N/A

Published: May 9, 2017 at 06:03 AM UTC

Updated: June 17, 2026 at 12:57 AM UTC

10 products affected across 1 vendorMalware Protection EngineWindows DefenderForefront Security

Using Microsoft Malware Protection Engine by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Microsoft Malware Protection Engine - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 81%

Description

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Forefront Security · Microsoft

95%

All versions

microsoft-windows-10 (environment) · microsoft-windows-7 (environment) · microsoft-windows-8-1 (environment) · microsoft-windows-rt-8-1 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-server-2012 (environment) · microsoft-windows-server-2016 (environment)

Malware Protection Engine · Microsoft

95%

v ≤ 1.1.13701.0Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016

Windows Defender · Microsoft

95%

All versions

Windows 10 · Microsoftdevice

80%

All versions

Windows 7 · Microsoftdevice

80%

All versions