CVE-2017-0290: Microsoft Forefront Security

High severity, CVSS 7.8. EPSS: 81.4% chance of exploitation in the next 30 days.

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability."

Affected products

• Microsoft Forefront Security: affected versions not specified
• Microsoft Malware Protection Engine: up to and including 1.1.13701.0
• Microsoft Windows Defender: affected versions not specified

Published 2017-05-09. Last modified 2026-06-17.