CVE-2026-70264
CVE-2026-70264 · Microsoft Defender Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
CVSS 5.5 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
windows defender
- Versions
- ≥ 0, < 1.1.26090.9: Affected (custom)
Update to 1.1.26090.9