Microsoft Releases Malware Patch for its…Malware Protection Engine

Microsoft published a patch for CVE-2017-11937, a memory-corruption remote code execution flaw in the Microsoft Malware Protection Engine used by Windows Defender and other Microsoft security products; the vulnerability could allow execution of attacker-controlled code when files are scanned. The vendor released a fix and users are strongly advised to apply updates immediately; there were no confirmed in-the-wild exploits at the time of the report.