Record summary
A quick snapshot of what this page covers.
CISA KEVyesWhether CISA lists this as exploited.
Techniques0AI attack methods connected to this vulnerability.
Case studies0Examples where this vulnerability is mentioned.
Vulnerability status
How serious this vulnerability is and whether it is known to be exploited.
CISA KEV
- CVE ID
- CVE-2017-8540
- Vendor/project
- Microsoft
- Product
- Malware Protection Engine
- Vulnerability name
- Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
- Date added
- 2022-03-03
- Due date
- 2022-03-24
- Known ransomware campaign use
- Unknown
CWE-119
Exploit context
What the vulnerability is about.
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".
Source
Where this page information comes from.
Original source
Original source links
Open the public records and source datasets used for this page.