933 matches found
Microsoft Defender 安全漏洞
Microsoft Defender is a threat protection software developed by the American company Microsoft. There are security vulnerabilities in Microsoft Defender. Attackers can exploit these vulnerabilities to gain higher privileges...
PT-2026-32884
Name of the Vulnerable Software and Affected Versions microsoft defender antimalware platform versions prior to 4.18.26030.3011 Description Insufficient granularity of access control in Microsoft Defender allows an authorized local attacker to elevate privileges to SYSTEM level. This issue, dubbe...
How Microsoft Defender protects high-value assets in real-world attack scenarios
In this article 1. Using asset context to strengthen detection 2. How high-value asset protection works 3. Real-world high-value asset protection scenarios 4. Protecting your HVAs 5. Learn more High-value assets including domain controllers, web servers, and identity infrastructure are frequent...
From transparency to action: What the latest Microsoft email security benchmark reveals
In our last benchmarking post, Clarity in complexity: New insights for transparent email security ,1 we shared why transparency matters more than ever in email security and how clear, consistent benchmarking helps security teams cut through noise and make confident decisions. Today, we’re...
From transparency to action: What the latest Microsoft email security benchmark reveals
In our last benchmarking post, Clarity in complexity: New insights for transparent email security ,1 we shared why transparency matters more than ever in email security and how clear, consistent benchmarking helps security teams cut through noise and make confident decisions. Today, we’re...
EUVD-2026-10325
A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...
CVE-2026-21537
Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability
...
KLA90872 ACE vulnerability in Microsoft System Center
A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-21537 Exploitation Related products Microsoft-Defender-for-Endpoint-for-Linux CVE list...
CVE-2026-21537: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks
HoneyMyte Mustang Panda is back with a new ToneShell backdoor. Read how this stealthy attack blinds Microsoft Defender to target government entities in Asia...
The vulnerability of the Microsoft 365 Defender Portal’s security management platform arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of the Microsoft 365 Defender Portal exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
CVE-2025-62459
Microsoft Defender Portal Spoofing Vulnerability...
EUVD-2025-198367
Microsoft Defender Portal Spoofing Vulnerability...
CVE-2025-62459
Microsoft Defender Portal Spoofing Vulnerability...
CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability
...
CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability
...
Microsoft Defender Portal Spoofing Vulnerability
...
Microsoft Defender 跨站脚本漏洞
Microsoft Defender is a threat protection software from Microsoft Corporation USA. A cross-site scripting vulnerability exists in Microsoft Defender that stems from a portal spoofing vulnerability...
PT-2025-47644
Name of the Vulnerable Software and Affected Versions Microsoft Defender Portal affected versions not specified Description A spoofing issue exists in the Microsoft Defender Portal. The vulnerability allows for potential unauthorized access or manipulation due to the spoofing mechanism...