3202 matches found
Microsoft Malware Protection Engine Privilege Escalation
The vulnerability of the Microsoft Malware Protection Engine in Microsoft’s Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to expose protected information and gain full control over the device...
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The security researcher going by the name Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has released a proof-of-concept PoC for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for...
Malicious code in cc-skills-helper (npm)
The npm package cc-skills-helper is a Windows-only supply-chain dropper published as seven versions 1.0.0 through 1.0.6 in a single 8-hour burst on 2026-04-25 by npm user betatester44676 [email protected], then abandoned. dist-tags.latest points at 1.0.6. All seven versions share the same...
MAL-2026-13933 Malicious code in cc-skills-helper (npm)
The npm package cc-skills-helper is a Windows-only supply-chain dropper published as seven versions 1.0.0 through 1.0.6 in a single 8-hour burst on 2026-04-25 by npm user betatester44676 [email protected], then abandoned. dist-tags.latest points at 1.0.6. All seven versions share the same...
PT-2026-72135
Уязвимость движка Microsoft Malware Protection Engine Защитника Microsoft Windows Defender операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию и получить полный контроль на...
ShieldBreak
ShieldBreak - Windows Defender 0day vulnerability Microsoft h...
CVE-2026-61936
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Microsoft Defender for Endpoint (Mac) contains a local information disclosure vulnerability (CVE-2026-54123). Attack vector: Local; Privileges Required: Low; User Interaction: None; Confidentiality Impact: High. CVSSv3.1 base score 5.5 (Medium). A fix is available via Microsoft’s update guidance;...
EUVD-2026-56418
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-61936
CVE-2026-61936 describes a local security bypass in the Windows Defender Firewall Service where missing authorization allows an authorized attacker to bypass a security feature locally. The NVD entry and CVE records corroborate this description. According to the provided metrics, the impact is hi...
EUVD-2026-56340
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
...
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
...
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...