← Database

CVE-2025-26684

MEDIUM CVSS: 6.7 Published: 2025-05-13 Modified: 2026-06-17

Description

External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Defender For Endpoint

Weakness Type

CWE-73, CWE-610

References