CVE-2026-21537: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-59497: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally...