Microsoft Defender For Endpoint vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Defender For Endpoint: 7 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:defender_for_endpoint
CVE-2026-54123
Medium · 5.5
CWE-200 Aug 11, 2026
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
CVE-2026-56178
High · 7.0
CWE-367 Jul 14, 2026
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVE-2026-50658
High · 7.0
CWE-367 Jul 14, 2026
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVE-2026-50657
Medium · 5.5
CWE-359 Jul 14, 2026
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.
CVE-2026-45647
High · 7.0
CWE-367 Jun 9, 2026
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVE-2026-21537
High · 8.8
CWE-94 Feb 10, 2026
Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
CVE-2025-59497
Medium · 4.7
CWE-367 Oct 14, 2025
Microsoft Defender for Linux Denial of Service Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.