HIGH

CVE-2026-33825

Microsoft Defender Antimalware Platform 2026-04-14 CVSS v3.1
CVSS
7.8
KEV

Description

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Summary dbcve.org

Local privilege escalation vulnerability in Microsoft Defender stemming from insufficient granularity of access control. An authorized user can exploit inadequate permission boundaries to gain elevated privileges on the affected system.

Mitigation

Apply Microsoft security updates for Defender as they become available; ensure timely patch deployment across all endpoints. Verify user permissions align with principle of least privilege to limit exposure.

Weakness (CWE)

CWE-1220

EPSS Score

6.75%
Probability of exploitation in next 30 days
93.7th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE