CVE-2026-41091

🗓️ 20 May 2026 13:09:13Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 17 Media mentions👁 95 Views

CVE-2026-41091: Improper link resolution before file access enables local privilege escalation in Microsoft Defender.

Reporter	Title	Published	Views	Family All 24
GithubExploit	Exploit for Link Following in Microsoft	21 May 202619:16	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	22 May 202623:42	–	githubexploit
ATTACKERKB	CVE-2026-41091	20 May 202613:09	–	attackerkb
Information Security Automation	About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability	6 Jun 202612:00	–	avleonov
Information Security Automation	June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities	17 Jun 202609:00	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, allows attackers to escalate their privileges.	21 May 202600:00	–	bdu_fstec
Circl	CVE-2026-41091	19 May 202621:00	–	circl
CISA KEV Catalog	Microsoft Defender Link Following Vulnerability	20 May 202600:00	–	cisa_kev
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	20 May 202612:00	–	cisa
CNNVD	Microsoft Defender 后置链接漏洞	20 May 202600:00	–	cnnvd

NVD

Vulners

CNA

Node

microsoft malware_protection_engineRange1.1.26030.3008–1.1.26040.8

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Malware Protection Engine",
    "versions": [
      {
        "version": "1.1.0.0",
        "lessThan": "1.1.26040.8",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

19 Jun 2026 16:13Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8

EPSS0.08371

SSVC