Malware Protection Engine

by Microsoft

Take action — actively targeted

Malware Protection Engine is actively targeted by attackers. A significant proportion of its known vulnerabilities are being exploited.

What to do
  1. Apply all available updates immediately
  2. Review your exposure — is this internet-facing?
  3. Monitor vendor advisories for this product

What Attackers Target

Vulnerabilities with high exploit probability 42.1%
Confirmed actively exploited (CISA) 5.3%
Public exploit code available 21.1%
Based on 19 known vulnerabilities. Percentages show the proportion that are actively dangerous — a low percentage means most vulnerabilities in this product are not being exploited.

Most Dangerous Vulnerabilities

CVE CVSS Exploit Probability Confirmed
CVE-2017-0290 7.8 87.8%
CVE-2017-8540 7.8 84.6% Yes
CVE-2017-11937 7.8 67.0%
CVE-2017-8541 7.8 64.2%
CVE-2017-8538 7.8 62.6%
CVE-2017-11940 7.8 32.4%
CVE-2017-8542 5.5 19.2%
CVE-2017-8539 5.5 19.2%
CVE-2021-31985 7.8 8.3%
CVE-2021-34522 7.8 4.1%
CVE-2023-24860 7.5 4.1%
CVE-2022-24548 5.5 4.0%
CVE-2021-42298 7.8 2.3%
CVE-2021-34464 7.8 2.2%
CVE-2021-31978 5.5 0.6%
CVE-2023-23389 6.3 0.4%
CVE-2022-37971 7.1 0.4%
CVE-2021-34471 7.8 0.2%
CVE-2023-33156 6.3 0.1%
60
/ 100
high-risk
Active Threat 46/50 · Critical
Exploit Availability 14/50 · Low

Score uses Wilson score intervals to account for sample size. Products with few CVEs are scored conservatively.