Catálogo de CVE

CVE-2026-33825

Insufficient granularity of access control in…

[Catálogo de CVE]

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

Gravedad
High · CVSS 7.8
Published
Source
[NVD] · [CVE record]
Exploitation
CISA Known Exploited Vulnerabilities
EPSS
6.75% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
UnknownRelease not reporteddefender_antimalware_platform4.18.26030.3011UnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reporteddefender_antimalware_platform4.18.26030.3011UnknownSource applicability is not establishedProvider not reported
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "defender_antimalware_platform",
      "fixed_version": "4.18.26030.3011",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

La asociación de paquetes está en curso.

Observado:

Referencias

[CERT-Bund public advisories] · [CISA Known Exploited Vulnerabilities (OSINT)] · [FIRST EPSS] · [National Vulnerability Database (NVD)]