933 matches found
CVE-2026-74801: Improper Neutralization of Special Elements used in an OS Command
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion...
EUVD-2026-58811
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...
CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
CVE-2026-69414
Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.
CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
...
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...
CVE-2026-69414: Improper Access Control
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...
PT-2026-72125
Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The security researcher going by the name Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has released a proof-of-concept PoC for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for...
PT-2026-72135
Уязвимость движка Microsoft Malware Protection Engine Защитника Microsoft Windows Defender операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию и получить полный контроль на...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
EUVD-2026-56418
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Microsoft Defender for Endpoint (Mac) contains a local information disclosure vulnerability (CVE-2026-54123). Attack vector: Local; Privileges Required: Low; User Interaction: None; Confidentiality Impact: High. CVSSv3.1 base score 5.5 (Medium). A fix is available via Microsoft’s update guidance;...
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...