← Database

CVE-2024-49071

MEDIUM CVSS: 6.5 Published: 2024-12-12 Modified: 2026-06-17

Description

Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.

Affected Platforms

Microsoft Defender For Endpoint

Weakness Type

CWE-612, NVD-CWE-Other

References