Lucene search
+L

2045 matches found

Kitploit
Kitploit
•added 2026/10/04 4:21 p.m.•23 views

Harden-Windows-Security

Harden Windows Security | マルウェアに対する新たな脅威 Windowsを安全に、確実に、Microsoft公式の方法のみで堅牢化 使用方法 関連情報 信頼性 サポート セキュリティ推奨事項 リソース ライセンス Wiki 基本FAQ ロードマップ 寄付 !IMPORTANT このリポジトリの重要なセクションへのクイックアクセスポイントはこちらです Harden System Securityアプリ AppControl Managerアプリ Application Control for Businessリソース !NOTE このリポジトリは、Windows...

6.1AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/28 11:48 p.m.•14 views

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender 特权提升漏洞 RedSun 是一种本地权限提升(LPE)技术(及其关联的 PoC),它滥用了 Microsoft Defender 恶意软件保护引擎中的一个链接跟踪漏洞。该漏洞允许低权限认证攻击者通过欺骗 Defender 的修复和云文件回滚机制,将攻击者控制的文件写入受保护目录(例如 C:\Windows\System32),从而获得 SYSTEM 权限。 📋 概述 CVE ID :CVE-2026-41091 漏洞类型 :访问文件前未正确解析链接(CWE-59 - 链接跟踪) 受影响组件...

7.8CVSS7.6AI score0.00443EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/28 4:12 p.m.•13 views

CVE-2026-50656

🚨 CVE-2026-50656 — Microsoft Defender "RoguePlanet" Microsoft マルウェア対策エンジンの特権昇格の脆弱性 ⚠️ 教育および防御的セキュリティ研究専用 📖 概要 CVE-2026-50656 は、Microsoft Defender が使用する Microsoft マルウェア対策エンジン に影響を与える高深刻度の 特権昇格 EoP 脆弱性です。 一般に RoguePlanet として知られるこの脆弱性は、不適切なリンク解決の問題 CWE-59 に起因し、低権限のローカル攻撃者が影響を受ける Windows...

7.8CVSS8AI score0.00368EPSS
SaveExploits4
Malwarebytes
Malwarebytes
•added 2026/09/24 12:45 p.m.•34 views

New Browser Guard features add protection before and after you click

Most of us click on search results without knowing much about the website we’re about to visit. And once we’re there, it’s not always obvious when something isn’t quite right. Now, we’ve added two new features to Malwarebytes Browser Guard that will do even more to keep you safe online. Search...

5.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/12 4:48 a.m.•16 views

Harden-Windows-Security HardenSystemSecurity-v1.0.88.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

5.9AI score
SaveExploits0References7
The Hacker News
The Hacker News
•added 2026/09/09 6:47 a.m.•13 views

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...

7.8CVSS7.2AI score0.00327EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/08/30 4:54 p.m.•17 views

Harden-Windows-Security HardenSystemSecurity-v1.0.80.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

5.9AI score
SaveExploits0References7
Qualys Blog
Qualys Blog
•added 2026/08/25 12:48 a.m.•40 views

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak CVE-2026-69414 is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigne...

7.8CVSS7.7AI score0.00327EPSS
SaveExploits1
EUVD
EUVD
•added 2026/08/15 12:31 a.m.•52 views

EUVD-2026-58811

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...

7.8CVSS5.3AI score0.00327EPSS
SaveExploits1References2
NVD
NVD
•added 2026/08/14 10:17 p.m.•131 views

CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...

7.8CVSS0.00327EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/08/14 9:50 p.m.•45 views

CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...

5.3AI score0.00327EPSS
SaveExploits1References2
CVE
CVE
•added 2026/08/14 9:50 p.m.•616 views

CVE-2026-69414

Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.

7.8CVSS7.6AI score0.00327EPSS
SaveExploits1References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/08/14 2:00 p.m.•56 views

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...

7.8CVSS7.5AI score0.00327EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/14 12:00 a.m.•49 views

PT-2026-72125

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...

7.8CVSS7.4AI score0.00327EPSS
SaveExploits1References64
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/14 12:00 a.m.•7 views

CVE-2026-69414: Improper Access Control

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...

7.8CVSS7.6AI score0.00327EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•23 views

PT-2026-72135

Уязвимость движка Microsoft Malware Protection Engine Защитника Microsoft Windows Defender операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию и получить полный контроль на...

7.8CVSS5.3AI score0.00368EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
•added 2026/07/13 12:00 a.m.•25 views

Windows Defender <= 1.1.26050.11 Elevation of Privilege (RoguePlanet) (CVE-2026-50656)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to or equal to 1.1.26050.11. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft Defende...

7.8CVSS7.4AI score0.00368EPSS
SaveExploits4References3
Malwarebytes
Malwarebytes
•added 2026/07/09 11:38 a.m.•34 views

Microsoft fixes RoguePlanet zero-day in Defender

Microsoft issued a security update that fixes the zero-day vulnerability known as RoguePlanet in Microsoft Defender. RoguePlanet is tracked as CVE-2026-50656, a Microsoft Defender elevation of privilege EoP vulnerability. As we reported last month, if successfully exploited, RoguePlanet can allow...

7.8CVSS7.3AI score0.00368EPSS
SaveExploits4
The Hacker News
The Hacker News
•added 2026/07/09 8:48 a.m.•30 views

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 CVSS score: 7.8, is a privilege escalation issue in the Microsoft Malware Protection Engine "mpengine.dll...

7.8CVSS7AI score0.00368EPSS
SaveExploits4
The Hacker News
The Hacker News
•added 2026/06/17 5:36 p.m.•25 views

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed RoguePlanet. The vulnerability has now been assigned the CVE identifier CVE-2026-50656 CVSS score: 7.8, with the tech giant describing it as a privilege escalation flaw. "Microsoft is...

7.8CVSS6AI score0.00368EPSS
SaveExploits4
Rows per page
Query Builder