Question 1

What is CVE-2013-1346?

Accepted Answer

CVE-2013-1346 is a high-severity software vulnerability (Memory corruption) with a CVSS score of 9.3. mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.

Question 2

Is CVE-2013-1346 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 12%.

Question 3

What products does CVE-2013-1346 affect?

Accepted Answer

Tracked products affected include Microsoft Defender (Malware Protection Engine). Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2013-1346?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2013-1346

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information