CVE-2017-8540

🗓️ 26 May 2017 20:00:00Reported by microsoftType

Microsoft Malware Protection Engine RCE Vulnerability in Various Microsoft Product

Reporter	Title	Published	Views	Family All 27
0day.today	Microsoft MsMpEng - Remotely Exploitable Use-After-Free due to Design Issue in GC Engine Exploit	31 May 201700:00	–	zdt
ATTACKERKB	CVE-2017-8538	26 May 201700:00	–	attackerkb
ATTACKERKB	CVE-2017-8541	26 May 201700:00	–	attackerkb
ATTACKERKB	CVE-2017-8540	26 May 201700:00	–	attackerkb
Circl	CVE-2017-8540	30 May 201700:00	–	circl
CISA KEV Catalog	Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability	3 Mar 202200:00	–	cisa_kev
CNVD	Microsoft Malware Protection Engine Remote Code Execution Vulnerability (CNVD-2017-09503)	31 May 201700:00	–	cnvd
Check Point Advisories	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8540)	29 May 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-8540	26 May 201720:00	–	cvelist
Kaspersky	KLA11029 Multiple vulnerabilities in the Microsoft Malware Protection Engine	9 May 201700:00	–	kaspersky

NVD

Node

microsoft malware_protection_engineRange1.1.13701.0–1.1.13704.0

AND

microsoft windows_10_1507Match-

microsoft windows_10_1511Match-

microsoft windows_10_1607Match-

microsoft windows_10_1703Match-

microsoft windows_7Match-sp1

microsoft windows_8.1Match-

microsoft windows_rt_8.1Match-

microsoft windows_server_2008Match-sp2

microsoft windows_server_2008Matchr2sp1

microsoft windows_server_2012Match-

microsoft windows_server_2012Matchr2

microsoft windows_server_2016Match-

Node

microsoft endpoint_protectionMatch-

microsoft exchange_serverMatch2013-

microsoft exchange_serverMatch2016-

microsoft forefront_endpoint_protectionMatch-

microsoft forefront_endpoint_protectionMatch2010

microsoft forefront_securityMatch-

microsoft intune_endpoint_protectionMatch-

microsoft security_essentialsMatch-

microsoft system_center_endpoint_protectionMatch-

microsoft windows_defenderMatch-

[
  {
    "product": "Malware Protection Engine",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/98703
exploit-db	www.exploit-db.com/exploits/42088/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8540
securitytracker	www.securitytracker.com/id/1038571
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

22 Apr 2026 13:47Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8

CVSS 29.3

EPSS0.79431

SSVC