CVE-2017-11940

CVE-2017-11940 is a remote code execution vulnerability in the Microsoft Malware Protection Engine, affecting various Microsoft products including Windows, Exchange Server, Forefront, and Windows Defender. This flaw allows an attacker to execute arbitrary code by crafting a malicious file that the engine fails to scan properly. With a CVSS score of 7.8 (High), it presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability, though user interaction is required. Despite its high FAUCET risk score and some community discussion, there is no evidence of active exploitation, nor are public exploit tools like Metasploit or Nuclei available.