3202 matches found
Windows Gather Defender Posture Audit
Audit Defender status, preferences, and recent detections !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.session import WindowsSessionMixin class ModulePost, WindowsSessionMixin: info = "name": "Windows Gather Defender Posture Audit", "description": "Audit...
vulnerabilities hidden in Microsoft Defender
Microsoft has addressed vulnerabilities in Defender. A malicious individual could exploit these vulnerabilities to gain enhanced privileges, execute arbitrary code with system rights, and/or access sensitive data. The malicious individual would need to deceive the victim into downloading and...
EUVD-2026-44121
Time-of-check time-of-use toctou race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally...
EUVD-2026-44120
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
EUVD-2026-44030
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
EUVD-2026-44029
Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-56178
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-50658
Time-of-check time-of-use toctou race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally...
CVE-2026-50657
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-55012
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-55011
Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
EUVD-2026-44253
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-56178
CVE-2026-56178 corresponds to a toctou (time-of-check, time-of-use) race condition vulnerability in Microsoft Defender for Endpoint for Mac that allows an authorized local attacker to escalate privileges. The issue affects the Defender for Endpoint component on macOS and stems from a race conditi...
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-50658
The CVE-2026-50658 entry describes a Time-of-check Time-of-use (TOCTOU) race condition in Microsoft Defender, enabling an authorized local attacker to elevate privileges. Connected sources corroborate a Mac-focused Defender elevation-of-privilege vulnerability, with multiple advisories and CVE re...
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-50657
CVE-2026-50657 : Microsoft Defender for Mac/Endpoint information disclosure vulnerability that allows an authorized attacker to disclose private information locally. CVSS v3.1 base score 4.7 (Medium); attack vector LOCAL, no user interaction, high impact on confidentiality, requires low privilege...