CVE-2018-0986: Microsoft Exchange Server

High severity, CVSS 8.8. EPSS: 63.3% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

Affected products

• Microsoft Exchange Server: version 2013 only; version 2016 only
• Microsoft Forefront Endpoint Protection 2010: affected versions not specified
• Microsoft Intune Endpoint Protection: affected versions not specified
• Microsoft Security Essentials: affected versions not specified
• Microsoft System Center Endpoint Protection: any version; version 2012 only
• Microsoft Windows Defender: affected versions not specified

Published 2018-04-04. Last modified 2026-06-17.