CVE-2014-2779: Microsoft Malware Protection Engine

Medium severity, CVSS 4.3. EPSS: 13.4% chance of exploitation in the next 30 days.

mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file.

Affected products

• Microsoft Malware Protection Engine: up to and including 1.1.10600.0

Published 2014-06-18. Last modified 2026-06-17.