Windows Defender / Microsoft Security Essentials Bad Bug (patched)

[#1]

Microsoft have just patched a bad bug in Windows Defender / Microsoft Security Essentials wherein the act of scanning could trigger a program to run.  This meant that a malicious file attached to an email could run as soon as it arrived, even if you were not around at the time.  To check that you have been patched you need to verify that you have Engine Version 1.1.13704.0 or later.  Look under Settings - Update & security - Windows Defender in Windows 10 or Help - About for MSE.

[#2]

mine wont update nor will my windows 10 update.... i wonder if they found more bugs and have disabled updates for the moment.

[#3]

Neither my Windows 7 nor Windows 10 computers had that engine version despite having applied the Patch Tuesday updates - probably because, although installed, Windows Defender does not usually run because it would conflict with Norton Security. I allowed it to run and update itself and now it is up to date but I have disabled it again.

[#4]

i have 1.1.13704.0 so am ok

[#5]

I don't use either, so no problem here.

[#6]

@alanf, if it's not running then it cannot do any harm.  However it might well start up if you were to uninstall Norton so you took a wise precaution.