810 matches found
Security Updates for Microsoft Malware Protection Engine (July 2026)
The Microsoft Malware Protection Engine installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. CVE-2026-55011 - Integ...
CVE-2026-50657
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-50658
Time-of-check time-of-use toctou race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally...
CVE-2026-55012
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-55011
Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-56178
CVE-2026-56178 corresponds to a toctou (time-of-check, time-of-use) race condition vulnerability in Microsoft Defender for Endpoint for Mac that allows an authorized local attacker to escalate privileges. The issue affects the Defender for Endpoint component on macOS and stems from a race conditi...
CVE-2026-50657
CVE-2026-50657 : Microsoft Defender for Mac/Endpoint information disclosure vulnerability that allows an authorized attacker to disclose private information locally. CVSS v3.1 base score 4.7 (Medium); attack vector LOCAL, no user interaction, high impact on confidentiality, requires low privilege...
CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability
...
CVE-2026-55012
CVE-2026-55012 is a Microsoft Defender vulnerability described as an integer overflow/wraparound that enables local code execution. The CVSS details indicate a Local attack vector with User Interaction required, no privileges required, and impacts to Confidentiality, Integrity, and Availability (...
CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability
...
CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability
...
CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability
...
Microsoft Defender Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
Microsoft Defender Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
PT-2026-58485
Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint on Mac versions prior to 101.26042.0020 Description An issue in Microsoft Defender allows an authorized attacker to locally disclose private personal information to an unauthorized actor. Recommendations Update...
June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities
June "In the Trend of VM" 28: Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous May edition, we covered four vulnerabilities. This time, there...
EUVD-2026-37141
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...