Defender vulnerabilities
2 published alerts for Microsoft Defender.
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft Defender is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-33825). Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally. CISA remediation due date: 2026-05-06. If you need help checking exposure, call (864) 335-9223.
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft Defender is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-44698). Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file. CISA remediation due date: 2023-01-03. If you need help checking exposure, call (864) 335-9223.