DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Malware Protection Engine und Defender: Mehrere Schwachstellen
view advisory published 2026-07-14
Ein Angreifer kann mehrere Schwachstellen in Microsoft Malware Protection Engine und Microsoft Defender ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen oder vertrauliche Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56178US | high7.0 | — | ||
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-50658US | — | — | ||
Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-50657US | medium5.5 | Exploit | ||
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-55012US | — | — | ||
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55011US | — | — | ||
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-50657external
- Microsoft Security Advisory CVE-2026-50658external
- Microsoft Security Advisory CVE-2026-55011external
- Microsoft Security Advisory CVE-2026-55012external
- Microsoft Security Advisory CVE-2026-56178external
- WID-SEC-W-2026-2322 - CSAF Versionself
- WID-SEC-2026-2322 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan