Skip to content

Vulnerabilities of Microsoft Microsoft Defender for Endpoint for Linux

Is your version affected?

CVE Summary Score Published
CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized… 7.8 High Oct 13, 2026
CVE-2026-21537 Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized… 8.8 High Feb 10, 2026
CVE-2025-59497 Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to… 7.0 High Oct 14, 2025
CVE-2025-47161 Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally 7.8 High May 15, 2025
CVE-2025-26684 External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate… 6.7 Medium May 13, 2025
CVE-2024-43614 Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally 5.5 Medium Oct 8, 2024
CVE-2022-33637 Microsoft Defender for Endpoint Tampering Vulnerability 6.5 Medium Jul 12, 2022
CVE-2022-23278 Microsoft Defender for Endpoint Spoofing Vulnerability 5.9 Medium Mar 9, 2022

Other Microsoft products