CVE-2026-41091HighCVSS 7.8
Microsoft Defender Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
🎯 Affected products1
- Microsoft Malware Protection Engine
✅ Remediation
KBRelease Notes (Security Update) — fixed build 1.1.26040.8