6.7
Medium
CVE-2025-26684 External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate…
Description
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Defender for Endpoint for Linux 101.0 | 101.0.0 → < 101.25032.0010 | 101.25032.0010 |
References
- Microsoft Defender Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Defender for Endpoint for Linux
The 8 CVEs of Microsoft Defender for Endpoint for Linux →
CVE-2026-102204
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
7.8
High
CVE-2026-21537
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized…
8.8
High
CVE-2025-59497
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to…
7.0
High
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally
7.8
High