Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

🗓️ 21 May 2026 10:55:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 22 Views

Microsoft warns of two actively exploited Defender flaws: privilege escalation and denial of service.

Reporter	Title	Published	Views	Family All 39
GithubExploit	Exploit for Link Following in Microsoft	21 May 202619:16	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	22 May 202623:42	–	githubexploit
ATTACKERKB	CVE-2026-41091	20 May 202613:09	–	attackerkb
ATTACKERKB	CVE-2026-45498	20 May 202613:09	–	attackerkb
Information Security Automation	About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability	6 Jun 202612:00	–	avleonov
Information Security Automation	June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities	17 Jun 202609:00	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Defender Antimalware Platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.	21 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, allows attackers to escalate their privileges.	21 May 202600:00	–	bdu_fstec
Circl	CVE-2026-41091	19 May 202621:00	–	circl
Circl	CVE-2026-45498	19 May 202621:00	–	circl

26 May 2026 07:28Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5 - 7.8

EPSS0.63076

SSVC

defender vulnerability privilege escalation denial of service defender update malware protection platform