Microsoft Patches Actively Exploited Defender Vulnerabilities

Summary

Microsoft and CISA confirmed active exploitation of vulnerabilities in Microsoft Defender, including a privilege escalation flaw (CVE-2026-41091) and a denial-of-service bug (CVE-2026-45498).

Take Action:

Check that your Microsoft Defender engine version is 1.1.26040.8 or higher to ensure you are protected against these active exploits. While updates are usually automatic, manual verification is necessary for critical systems to confirm the patches were applied.

---

Read the full article on BeyondMachines

---

This article was originally published on BeyondMachines