CVE-2017-11937

CVE-2017-11937 is a remote code execution vulnerability in the Microsoft Malware Protection Engine, affecting various Windows operating systems, Microsoft Defender, Forefront, and Exchange Server. This high-severity flaw (CVSS 7.8) allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted file, leveraging a local attack vector with low complexity. While there is no known public exploit code or active exploitation, the vulnerability has garnered significant community discussion and media coverage, indicating its potential impact.