Defender For Endpoint (Microsoft) - vulnerabilities (CVEs)
17 CVEs, 1 in the last 30 days, 8 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.
CVEs of Defender For Endpoint
- CVE-2026-105726 - CVSS 5.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
- CVE-2026-54123 - CVSS 5.5 (medium), 2026-08-11: Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
- CVE-2026-56178 - CVSS 7 (high), 2026-07-14: Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
- CVE-2026-50658 - CVSS 7 (high), 2026-07-14: Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- CVE-2026-50657 - CVSS 5.5 (medium), 2026-07-14: Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.
- CVE-2026-45647 - CVSS 7 (high), 2026-06-09: Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
- CVE-2026-21537 - CVSS 8.8 (high), 2026-02-10: Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent…
- CVE-2025-59497 - CVSS 7 (high), 2025-10-14: Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.
- CVE-2025-47161 - CVSS 7.8 (high), 2025-05-15: Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
- CVE-2025-26684 - CVSS 6.7 (medium), 2025-05-13: External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
- CVE-2024-49071 - CVSS 6.5 (medium), 2024-12-12: Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to…
- CVE-2024-49057 - CVSS 8.1 (high), 2024-12-12: Microsoft Defender for Endpoint on Android Spoofing Vulnerability
- CVE-2024-43614 - CVSS 5.5 (medium), 2024-10-08: Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
- CVE-2024-21315 - CVSS 7.8 (high), 2024-02-13: Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
- CVE-2022-35828 - CVSS 7.8 (high), 2022-09-13: Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
- CVE-2022-33637 - CVSS 6.5 (medium), 2022-07-12: Microsoft Defender for Endpoint Tampering Vulnerability
- CVE-2022-23278 - CVSS 5.9 (medium), 2022-03-09: Microsoft Defender for Endpoint Spoofing Vulnerability
