7.8
High
CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
Description
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Defender for Endpoint for Linux | Versions not published | |
| Windows Subsystem for Linux (WSL2) 3.0 | earliest → < 3.0.1 | 3.0.1 |
References
- Windows Subsystem for Linux Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Defender for Endpoint for Linux
The 8 CVEs of Microsoft Defender for Endpoint for Linux →
CVE-2026-21537
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized…
8.8
High
CVE-2025-59497
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to…
7.0
High
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-26684
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate…
6.7
Medium