Microsoft Corporation Malware Protection Engine

Name: Microsoft Corporation Malware Protection Engine
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical3high4medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-8540US	high7.8OT critical	71.9% (99th)	KEV	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
CVE-2017-8538US	high7.8	50.0% (99th)	Exploit	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
CVE-2017-8541US	high7.8	48.1% (99th)	Exploit	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016
CVE-2017-8537US	medium5.5	16.8% (97th)	Exploit	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
CVE-2017-8536US	medium5.5	16.8% (97th)	Exploit	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
CVE-2017-8535US	medium5.5	16.8% (97th)	Exploit	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
CVE-2017-8539US	medium5.5	6.02% (93rd)	—	no fix	2017-05-26	≤ Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.

weaknesses (5)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-369Divide By Zero4 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-674Uncontrolled Recursion4 CVEs
CWE-787Out-of-bounds Write1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan