WID-SEC-W-2026-1603

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Defender und Malware Protection Engine: Mehrere Schwachstellen

view advisory published 2026-05-19

Ein Angreifer kann mehrere Schwachstellen in Microsoft Defender und Microsoft Malware Protection Engine ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Code auszuführen und um einen Denial of Service Zustand herbeizuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-45584US—Exploit
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
CVE-2026-45498UShigh7.5OT criticalKEV
Microsoft Defender Denial of Service Vulnerability
CVE-2026-41091US—OT criticalKEV
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan