CVE-2017-8540

CVE-2017-8540 affects Microsoft Malware Protection Engine (MMPE) across Forefront/Defender deployments. The weakness arises from a use-after-free in the garbage collection system managing JavaScript objects during scanning of specially crafted files, enabling memory corruption and potential remot...

CVE-2018-0986

A remote code execution vulnerability exists in the Microsoft Malware Protection Engine due to insufficient input data validation during the scanning of specially crafted files. Specifically, the mpengine.dll component fails to properly handle certain archive formats, such as RAR , leading to mem...