Microsoft Forefront Endpoint Protection vulnerabilities

5 CVEs affecting Microsoft Forefront Endpoint Protection, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8558, published 2017-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8540: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability, published 2017-05-26. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 71.9% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
CVE-2017-8558, published 2017-06-29. High severity, CVSS 7.8. EPSS: 43.6% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
CVE-2017-8537, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
CVE-2017-8536, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…
CVE-2017-8535, published 2017-05-26. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…