Not rated
CVE-2018-0986 A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a…
Description
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Defender | Versions not published | |
| Windows Intune Endpoint Protection | Versions not published | |
| Microsoft Security Essentials | Versions not published | |
| Microsoft System Center Endpoint Protection | Versions not published | |
| Microsoft Exchange Server | 2016 | No fix stated |
| Microsoft Exchange Server | 2013 | No fix stated |
| Microsoft System Center | Versions not published | |
| Microsoft Forefront Endpoint Protection | 2010 | No fix stated |
References
- 1040631 www.securitytracker.com
- 103593 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 44402 www.exploit-db.com
Timeline
- Published
- Last modified
Other CVEs of Windows Defender
The 5 CVEs of Windows Defender →
CVE-2026-70264
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to…
5.5
Medium
CVE-2021-24092
Microsoft Defender Elevation of Privilege Vulnerability
7.8
High
CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
7.8
High
CVE-2019-1161
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary…
Not rated