CVE-2018-0986

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2018
Source publication: Apr 4, 2018
Source updated: Aug 5, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Windows Defender

Vendor: Microsoft
Product: Windows Defender
Platforms: Unknown
Default status: Unknown

Windows Defender · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Windows 10 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1511 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1511 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1607 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1607 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1703 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1703 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1709 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 10 Version 1709 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 7 for 32-bit Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 7 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 8.1 for 32-bit systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows 8.1 for x64-based systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows RT 8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2008 R2 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2012	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2012 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2012 R2	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2012 R2 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2016	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server 2016 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
Windows Server, version 1709 (Server Core Installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Windows Intune Endpoint Protection

Vendor: Microsoft
Product: Windows Intune Endpoint Protection
Platforms: Unknown
Default status: Unknown

Windows Intune Endpoint Protection · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Windows Intune Endpoint Protection	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Security Essentials

Vendor: Microsoft
Product: Microsoft Security Essentials
Platforms: Unknown
Default status: Unknown

Microsoft Security Essentials · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Microsoft Security Essentials	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft System Center Endpoint Protection

Vendor: Microsoft
Product: Microsoft System Center Endpoint Protection
Platforms: Unknown
Default status: Unknown

Microsoft System Center Endpoint Protection · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Microsoft System Center Endpoint Protection	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Exchange Server

Vendor: Microsoft
Product: Microsoft Exchange Server
Platforms: Unknown
Default status: Unknown

Microsoft Exchange Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2013	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft System Center

Vendor: Microsoft
Product: Microsoft System Center
Platforms: Unknown
Default status: Unknown

Microsoft System Center · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2012 Endpoint Protection	`affected`	Unavailable	Unavailable	Unavailable	None listed
2012 R2 Endpoint Protection	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Forefront Endpoint Protection

Vendor: Microsoft
Product: Microsoft Forefront Endpoint Protection
Platforms: Unknown
Default status: Unknown

Microsoft Forefront Endpoint Protection · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2010	`affected`	Unavailable	Unavailable	Unavailable	None listed