IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek KEV

CVE-2017-8540Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Microsoft Corporation Malware Protection Engine Yayım: (9 yıl önce)

Aktif olarak istismar ediliyor — Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 24.03.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-8540

Açıklama

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541.

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
microsoft endpoint protection —
microsoft exchange server 2013
microsoft forefront endpoint protection 2010
microsoft forefront security —
microsoft intune endpoint protection —
Microsoft Corporation Malware Protection Engine Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016.
microsoft security essentials —
microsoft system center endpoint protection —
microsoft windows defender —

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (11)
  • cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:* ≥ 1.1.13701.0 < 1.1.13704.0
  • cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:intune_endpoint_protection:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*

Aynı üründe son açıklar — Microsoft Exchange Server

9.3Kritik
CVE-2026-70279

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

1.3%EPSS
8.1Yüksek
CVE-2026-70571

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Yüksek
CVE-2026-77910

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

7.8Yüksek
CVE-2026-87692

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server Subscription Edition RTM

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

2.3%EPSS
7.8Yüksek
CVE-2026-87695

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

7.5Yüksek
CVE-2026-87696

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.