8.8
Élevée
CVE-2026-21537 Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized…
Description
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Defender for Endpoint for Linux 1.0 | premières → < 1.0.9.0 | 1.0.9.0 |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Defender for Endpoint for Linux
Les 8 CVE de Microsoft Defender for Endpoint for Linux →
CVE-2026-102204
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
7.8
Élevée
CVE-2025-59497
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to…
7.0
Élevée
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2025-26684
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate…
6.7
Moyenne