CVE-2017-8558

N/A

Published: June 29, 2017 at 01:00 PM UTC

Updated: June 17, 2026 at 01:26 AM UTC

10 products affected across 1 vendorWindows DefenderSecurity EssentialsForefront Endpoint Protection

Using Microsoft Malware Protection Engine by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Microsoft Malware Protection Engine - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 44%

Description

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Endpoint Protection · Microsoft

95%

All versions

Forefront Endpoint Protection · Microsoft

95%

2010

Security Essentials · Microsoft

95%

All versions

Windows Defender · Microsoft

95%

All versions

microsoft-windows-10 (environment) · microsoft-windows-7 (environment) · microsoft-windows-8-1 (environment) · microsoft-windows-server-2008 (environment)

Windows Intune Endpoint Protection · Microsoft

95%

All versions

Malware Protection Engine · Microsoft

60%

32-bit versions only of Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.

Windows 10 · Microsoftdevice

80%

All versions

Windows 7 · Microsoftdevice

80%

All versions