Microsoft Addresses Three Vulnerabilities in Defender; CISA Adds Two to KEV
NEOSEC enrichment — no mirror of the original source
Microsoft has released fixes for two vulnerabilities in Microsoft Defender: a privilege elevation vulnerability due to improper link resolution before file access (CVE-2026-41091), and denial-of-service vulnerability (CVE-2026-45498). The U
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-45584Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45584Microsoft Defender und Malware Protection Engine: Mehrere Schwachstellen
- CVE-2026-45584Microsoft Malware Protection Engine: Heap-basierter Pufferüberlauf
- CVE-2026-41091Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- CVE-2026-45584Microsoft Defender Remote Code Execution Vulnerability
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45498Microsoft Defender — Microsoft Defender Denial of Service Vulnerability
- CVE-2026-41091Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2026-41091Microsoft Defender — Microsoft Defender Link Following Vulnerability
Affected vendors and products
More on Microsoft
Other advisories
- HighCVE-2026-112997Google Chrome / Microsoft Edge: Mehrere Schwachstellen
- HighCVE-2026-112997Microsoft Edge Multiple Vulnerabilities
- MediumCVE-2026-114148Microsoft .NET und ASP.NET: Schwachstelle ermöglicht Privilegieneskalation
- HighCVE-2026-110915Google Chrome / Microsoft Edge: Mehrere Schwachstellen
- HighCVE-2026-58611Microsoft Apps: Mehrere Schwachstellen ermöglichen Privilegieneskalation
- HighCVE-2026-96187Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- MediumCVE-2026-85330Microsoft Edge for Android Security Feature Bypass Vulnerability
- HighCVE-2026-85899Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Other news entries
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
- Node2Shell puts Microsoft and Node.js on Brotli patch dutyNewsCSO Online
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensNewsThe Hacker News
- Microsoft releases emergency .NET security fixes for Google Brotli bugNewsThe Register — Security
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareNewsThe Hacker News
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- Microsoft .NET und ASP.NET: Schwachstelle ermöglicht PrivilegieneskalationVulnerabilityBSI CERT-Bund
Source: https://www.helpnetsecurity.com/
ID