Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-21 10:55 UTC
  • Importiert: 2026-06-01 11:04 UTC
  • CVSS: 7.8
  • Quelle-ID: thn_global
  • uid_hash: 4ef51f4421d53631718c98ea84cb5610269264380915f0ca4737342bc9fbd327

Inhalt

Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.

The former, tracked as CVE-2026-41091, is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker to gain SYSTEM privileges.

"Improper link resolution before file access ('link following') in Microsoft Defender

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-41091

HIGH

7.8

HIGH

7.8

2026-05-20

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews