CVE-2024-49071

Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - secure@microsoft.com

Published

2024-12-12

Last modified

2026-06-09

Weaknesses

CWE-612

Affected products

• Defender For Endpoint (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49071