A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.76092.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Microsoft Windows Defender affected
Version Status Constraints
Windows 10 for 32-bit Systems affected —
Windows 10 for x64-based Systems affected —
Windows 10 Version 1511 for 32-bit Systems affected —
Windows 10 Version 1511 for x64-based Systems affected —
Windows 10 Version 1607 for 32-bit Systems affected —
Windows 10 Version 1607 for x64-based Systems affected —
Windows 10 Version 1703 for 32-bit Systems affected —
Windows 10 Version 1703 for x64-based Systems affected —
Windows 10 Version 1709 for 32-bit Systems affected —
Windows 10 Version 1709 for x64-based Systems affected —
Windows 7 for 32-bit Systems Service Pack 1 affected —
Windows 7 for x64-based Systems Service Pack 1 affected —
Windows 8.1 for 32-bit systems affected —
Windows 8.1 for x64-based systems affected —
Windows RT 8.1 affected —
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 affected —
Windows Server 2008 R2 for x64-based Systems Service Pack 1 affected —
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) affected —
Windows Server 2012 affected —
Windows Server 2012 (Server Core installation) affected —
Windows Server 2012 R2 affected —
Windows Server 2012 R2 (Server Core installation) affected —
Windows Server 2016 affected —
Windows Server 2016 (Server Core installation) affected —
Windows Server, version 1709 (Server Core Installation) affected —
Microsoft Windows Intune Endpoint Protection affected
Version Status Constraints
Windows Intune Endpoint Protection affected —
Microsoft Microsoft Security Essentials affected
Version Status Constraints
Microsoft Security Essentials affected —
Microsoft Microsoft System Center Endpoint Protection affected
Version Status Constraints
Microsoft System Center Endpoint Protection affected —
Microsoft Microsoft Exchange Server affected
Version Status Constraints
2013 affected —
2016 affected —
Microsoft Microsoft System Center affected
Version Status Constraints
2012 Endpoint Protection affected —
2012 R2 Endpoint Protection affected —
Microsoft Microsoft Forefront Endpoint Protection affected
Version Status Constraints
2010 affected —

Configuration 1 [-]

OR cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:intune_endpoint_protection:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:system_center_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Microsoft Subscribe
Exchange Server Subscribe
Forefront Endpoint Protection 2010 Subscribe
Intune Endpoint Protection Subscribe
Security Essentials Subscribe
System Center Endpoint Protection Subscribe
Windows 10 Subscribe
Windows 7 Subscribe
Windows 8.1 Subscribe
Windows Defender Subscribe
Windows Rt 8.1 Subscribe
Windows Server 2008 Subscribe
Windows Server 2012 Subscribe
Windows Server 2016 Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.securityfocus.com/bid/103593 cve-icon cve-icon
http://www.securitytracker.com/id/1040631 cve-icon cve-icon
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986 cve-icon cve-icon
https://www.exploit-db.com/exploits/44402/ cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2024-08-05T03:44:11.806Z

Reserved: 2017-12-01T00:00:00

Link: CVE-2018-0986

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-04T17:29:01.583

Modified: 2024-11-21T03:39:21.963

Link: CVE-2018-0986

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses