5.5
Medium
CVE-2026-70264 Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to…
Description
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Defender 1.1 | earliest → < 1.1.26090.9 | 1.1.26090.9 |
References
- Microsoft Defender Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Defender
The 5 CVEs of Windows Defender →
CVE-2021-24092
Microsoft Defender Elevation of Privilege Vulnerability
7.8
High
CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
7.8
High
CVE-2019-1161
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary…
Not rated
CVE-2018-0986
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a…
Not rated