Researcher’s Disclosures Spotlight Microsoft CVD Process
NEOSEC enrichment — no mirror of the original source
In April 2026, a security researcher styled “Nightmare Eclipse” began publishing proof-of-concept (PoC) exploits on GitHub for half a dozen previously unknown and undisclosed vulnerabilities in Microsoft products, described below. On May 27
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-41091Microsoft Defender und Malware Protection Engine: Mehrere Schwachstellen
- CVE-2026-45585Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnera…
- CVE-2026-9614Ivanti Neurons for ITSM: unzureichende Zugriffskontrolle
- CVE-2026-45585Microsoft Windows: Befehlsinjektion
- CVE-2026-41091Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- CVE-2026-33825Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45498Microsoft Defender — Microsoft Defender Denial of Service Vulnerability
- CVE-2026-33825Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- CVE-2026-41091Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2026-33825Microsoft Defender — Microsoft Defender Insufficient Granularity of Access Control Vulnerability
- CVE-2026-9614Ivanti Neurons for ITSM: Schwachstelle ermöglicht Privilegieneskalation
- CVE-2026-45585Windows BitLocker Security Feature Bypass Vulnerability
- CVE-2026-41091Microsoft Defender — Microsoft Defender Link Following Vulnerability
- CVE-2026-20230Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Manipulation von Dateien
Affected vendors and products
- Cisco Cisco Unified Communications Manager
- Cisco Cisco Unified Communications Manager
- Hp Inc.
- Ivanti Ivanti Neurons for ITSM
- Ivanti Neurons For Itsm (cloud)
- Microsoft Defender Antimalware Platform
- Microsoft Microsoft Malware Protection Engine
- Microsoft Microsoft Malware Protection Engine
- Microsoft Microsoft Windows 10
- Microsoft Windows 10 Version 1809
- Microsoft Microsoft Windows 11 24H2
- Microsoft Microsoft Windows 11 25H2
Source: https://isc.sans.edu/podcastdetail/9960
ID