A los del defender y el security essentials:
"CVE -2017-11937 Microsoft Malware Protection Engine Remote Code Execution Vulnerability - this is a memory corruption vulnerability which is triggered when the Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. A successful exploit of this vulnerability would allow an attacker to execute arbitrary code in the security context of the LocalSystem account and take control of the system.
2) Mitigation
Microsoft have issued an out-of-band critical update for the flaw and have advised users to install it as soon as possible. Constituents should ensure that the latest version of the Microsoft Malware Protection Engine is installed for the affected systems and that they are being actively downloaded, approved and deployed in their environments."
Me llegó este correo el otro día, hay un exploit a traves del malware protection engine, hay una actualización del mismo, por si no estabais enterados.