CVE-2022-23278

CVE-2022-23278 is a Microsoft Defender for Endpoint spoofing vulnerability. The issue concerns spoofing to tamper with security protections. Microsoft released a security update to address the vulnerability (MG MSRC guidance and OS updates referenced). CVSS v3.1 base score is 5.9 (NETWORK, HIGH a...

CVE-2022-33637

Microsoft Defender for Endpoint Tampering Vulnerability (CVE-2022-33637) is described in connected sources as an issue caused by insufficient input validation that can let an attacker remotely elevate privileges and execute arbitrary code, impacting Defender for Endpoint. The PT-2022-4303 entry n...

CVE-2024-49071

CVE-2024-49071 affects Microsoft Windows Defender (Windows Defender/Defender for Endpoint for Windows). The underlying issue is improper authorization of an index containing sensitive information from a Global Files search, which could allow an authorized attacker to disclose information over a n...

CVE-2022-35828

CVE-2022-35828 is an elevation-of-privilege vulnerability in Microsoft Defender for Endpoint for Mac. The root cause is insufficient access control, enabling a local, authenticated attacker to escalate privileges to SYSTEM/root. Impact is privilege escalation on macOS endpoints running Defender f...

CVE-2026-21537

Technical details such as affected product versions, root cause, exploit methods, and patches are not provided in the supplied documents. Monitor for updates and new disclosures.