CVE-2026-105726 Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally

Description

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Defender for Endpoint for Windows 1.0	1.0.0.0 → < 4.18.26060.3008	4.18.26060.3008

Other CVEs of Microsoft Defender for Endpoint for Windows

The 4 CVEs of Microsoft Defender for Endpoint for Windows →

CVE-2024-49071 Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender… 6.5 Medium CVE-2024-21315 Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability 7.8 High CVE-2022-23278 Microsoft Defender for Endpoint Spoofing Vulnerability 5.9 Medium