6.5
Medium
CVE-2024-49071 Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender…
Description
Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Defender for Endpoint for Windows | Versions not published |
Other CVEs of Microsoft Defender for Endpoint for Windows
The 4 CVEs of Microsoft Defender for Endpoint for Windows →
CVE-2026-105726
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally
5.5
Medium
CVE-2024-21315
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
7.8
High
CVE-2022-23278
Microsoft Defender for Endpoint Spoofing Vulnerability
5.9
Medium