8.8
High
CVE-2026-21537 Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized…
Description
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Defender for Endpoint for Linux 1.0 | earliest → < 1.0.9.0 | 1.0.9.0 |
References
Timeline
- Published
- Last modified
Other CVEs of Microsoft Defender for Endpoint for Linux
The 8 CVEs of Microsoft Defender for Endpoint for Linux →
CVE-2026-102204
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
7.8
High
CVE-2025-59497
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to…
7.0
High
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-26684
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate…
6.7
Medium