mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• microsoft malware protection engineup to 1.1.9402.0 inclusive

Other highest-scoring records for the same primary product.

• CVE-2017-8540The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPKEV
  83Now
• CVE-2026-41091Microsoft Defender Elevation of Privilege VulnerabilityKEV
  61This week
• CVE-2017-11937The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,
  39Monitor
• CVE-2017-11940The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,
  37Monitor
• CVE-2021-42298Microsoft Defender Remote Code Execution Vulnerability
  33Monitor
• CVE-2021-31985Microsoft Defender Remote Code Execution Vulnerability
  33Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.