Microsoft Defender vulnerabilities are being exploited in the wild

🗓️ 21 May 2026 17:36:52Reported by Malwarebytes blogType

Two Microsoft Defender flaws are actively exploited; patch CVE-2026-41091 and CVE-2026-45498.

Reporter	Title	Published	Views	Family All 39
GithubExploit	Exploit for Link Following in Microsoft	21 May 202619:16	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	22 May 202623:42	–	githubexploit
ATTACKERKB	CVE-2026-41091	20 May 202613:09	–	attackerkb
ATTACKERKB	CVE-2026-45498	20 May 202613:09	–	attackerkb
Information Security Automation	About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability	6 Jun 202612:00	–	avleonov
Information Security Automation	June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities	17 Jun 202609:00	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Defender Antimalware Platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.	21 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, allows attackers to escalate their privileges.	21 May 202600:00	–	bdu_fstec
Circl	CVE-2026-41091	19 May 202621:00	–	circl
Circl	CVE-2026-45498	19 May 202621:00	–	circl