Redmond's out-of-band advisory landed after the bugs were fixed
Microsoft has broken out of its usual cycle to patch more Malware Protection Engine bugs notified privately by Google Project Zero. Project Zero's Mateusz Jurczyk didn't turn up just one “crazy bad” bug: while the new bugs are all named either “Microsoft Malware Protection Engine Denial of Service Vulnerability” or “Microsoft Malware Protection Engine Remote Code Execution Vulnerability”, there are eight individual bugs covered in Microsoft's announcement. They're all different angle...