CVE-2017-0290

CVE-2017-0290 is a remote code execution vulnerability in the Microsoft Malware Protection Engine, affecting Microsoft Forefront, Defender, and various Windows operating systems. A specially crafted file can lead to memory corruption, allowing an attacker to execute arbitrary code with elevated privileges. This vulnerability has a CVSS score of 7.8 (High) due to its potential for complete compromise of confidentiality, integrity, and availability, though it requires user interaction (UI:R) for exploitation. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB, and it garnered significant community discussion and media coverage at the time of its discovery, including an emergency out-of-band patch from Microsoft.