HIGH
CVE-2026-33825
CVSS
7.8
KEV
Description
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Summary dbcve.org
Local privilege escalation vulnerability in Microsoft Defender stemming from insufficient granularity of access control. An authorized user can exploit inadequate permission boundaries to gain elevated privileges on the affected system.
Mitigation
Apply Microsoft security updates for Defender as they become available; ensure timely patch deployment across all endpoints. Verify user permissions align with principle of least privilege to limit exposure.
Weakness (CWE)
CWE-1220
EPSS Score
6.75%
Probability of exploitation in next 30 days
93.7th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.