Microsoft Defender Insufficient Granularity of Access Control Vulnerability

ALTO 7.8EXPLOITED (CISA KEV)CVE-2026-33825 · Published 14/04/2026 · updated 24/07/2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 22/04/2026. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

En resumen

CVE-2026-33825 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a defender antimalware platform (microsoft).
Explotada activamente: CISA la añadió al catálogo KEV el 22/04/2026.
Probabilidad de explotación en los próximos 30 días (EPSS): 6.7%, mayor que el 94.0% de las vulnerabilidades.
Solución: actualizar a 4.18.26030.3011 o posterior.

Package	Affected versions	Patched versions
defender antimalware platform microsoft	`< 4.18.26030.3011`	`4.18.26030.3011`

Description

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825 · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
huntress.com/blog/nightmare-eclipse-intrusion · Third Party Advisory
CISA KEV · CVE-2026-33825

Más vulnerabilidades de defender antimalware platform

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free