microsoft defender vulnerabilities

Latest microsoft defender CVEs

Newest publication first

1. CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability

   Published 2026-05-20

   High·CVSS 7.5 EPSS 63.1% CISA KEV added 2026-05-20 Exploited in the wild

   Microsoft Defender Denial of Service Vulnerability

2. CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability

   Published 2026-04-14

   High·CVSS 7.8 EPSS 6.9% CISA KEV added 2026-04-22 Ransomware Exploited in the wild

   Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.