CVE-2018-0986
High
Description
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Microsoft Exchange Server
PublishedApr 4, 2018
First seenApr 4, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft exchange_server | 2013, 2016 | — |
| microsoft security_essentials | No range specified | — |
| microsoft forefront_endpoint_protection_2010 | No range specified | — |
| microsoft intune_endpoint_protection | No range specified | — |
| microsoft system_center_endpoint_protection | No range specified, 2012 | — |
| microsoft windows_defender | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.