VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 4, 2018· Updated Jun 17, 2026

CVE-2018-0986

CVE-2018-0986

Description

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Microsoft/Exchange Server3 versions
    cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*
    • (no CPE)range: 2013
  • Microsoft/Forefront Endpoint Protection 2010
    cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*
  • Microsoft/Windows Intune Endpoint Protection2 versions
    cpe:2.3:a:microsoft:intune_endpoint_protection:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:intune_endpoint_protection:-:*:*:*:*:*:*:*
    • (no CPE)range: Windows Intune Endpoint Protection
  • Microsoft/Security Essentials2 versions
    cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
    • (no CPE)range: Microsoft Security Essentials
  • Microsoft/System Center Endpoint Protection4 versions
    cpe:2.3:a:microsoft:system_center_endpoint_protection:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:system_center_endpoint_protection:*:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*
    • (no CPE)range: Microsoft System Center Endpoint Protection
  • Microsoft/Windows Defender2 versions
    cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
    • (no CPE)range: Windows 10 for 32-bit Systems
  • Microsoft/Malware Protection Enginellm-create
  • Microsoft/Forefront Endpoint Protectioncpe-rescue
    Range: 2010
  • Microsoft/Microsoft System Centerv5
    Range: 2012 Endpoint Protection

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.