CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Defender Local Privilege Escalation Vulnerability (CVE-2026-41091) Technical Advisory
[Affected Scope] Windows operating system environments with Microsoft Defender enabled
[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host
[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions
Microsoft Defender Local Privilege Escalation Vulnerability (CVE-2026-33825) Security Advisory
[Affected Scope] Windows systems with Microsoft Defender enabled and lacking the latest security updates.
[Impact] An authorized local attacker can exploit insufficient access control granularity to elevate privileges to SYSTEM, potentially disabling security controls.
[Mitigation] Immediately update the Microsoft Defender engine and definition files to the latest version, especially as this vulnerability is actively exploited in the wild.