CVE-2026-41091

⚠ KEVEPSS 8.0%

Microsoft Defender Link Following Vulnerability

Added to CISA KEV: 5/20/2026

Description

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.

Affected packages (0)

No package mapping in OSV.