CVE-2026-33825
Microsoft · Published April 14, 2026
7.8
CVSS v3.1
HIGHCISA KEV — Federal agencies must patch by deadline
Actively exploited in the wild
Patch availableGet patch
Description
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Affected Products
- Defender Antimalware Platform < 4.18.26030.3011
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H