Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:defender_for_endpoint:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductDefender For Endpoint (1b8bf677-09bd-561b-bf51-4aa5313a6a1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21537 vulnerable 2026-06-08 07:49:16.578273 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability
HIGH (8.8)
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
Published: 2026-02-10T17:51:32.870Z
Updated: 2026-05-11T21:25:33.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59497 vulnerable 2026-06-08 07:35:22.092058 Microsoft Defender for Linux Denial of Service Vulnerability
HIGH (7)
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.
Published: 2025-10-14T17:01:48.832Z
Updated: 2026-02-22T17:26:08.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47161 vulnerable 2026-06-08 07:27:09.553025 Microsoft Defender for Endpoint Elevation of Privilege Vulnerability
HIGH (7.8)
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
Published: 2025-05-15T19:21:43.092Z
Updated: 2026-02-26T18:28:07.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26684 vulnerable 2026-06-08 07:14:50.270687 Microsoft Defender Elevation of Privilege Vulnerability
MEDIUM (6.7)
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
Published: 2025-05-13T16:58:26.559Z
Updated: 2026-02-13T19:20:48.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49071 vulnerable 2026-06-08 06:50:12.310295 Windows Defender Information Disclosure Vulnerability
MEDIUM (6.5)
Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.
Published: 2024-12-12T19:07:50.753Z
Updated: 2026-06-09T18:30:59.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49057 vulnerable 2026-06-08 06:50:12.249980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43614 vulnerable 2026-06-08 06:45:52.538611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21315 vulnerable 2026-06-08 06:27:32.501694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33637 vulnerable 2026-06-08 05:44:51.060390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23278 vulnerable 2026-06-08 05:40:56.775861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.