nyanbinary (unvalued goose)https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584
One job. You had one job.
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Successful exploitation of this vulnerability would require a remote, unauthenticated attacker to entice a local user to take multiple actions that results in Defender scanning a malicious file that has been quarantined.
This is something I love about some AV vulnerabilities - intentionally triggering detections as part of exploitation. Also had that with the Nightmare Eclipse Defender vulns & also had me giggle there 
. I just ... feels right!
Alexandre Dulaunoy
Lucas Werkmeister@nyanbinary Microsoft Offender
@LucasWerkmeister the best defense is a good offense. This is why the A in AV now stands for Agentic, performing fully autonomous cyber offense operations from your laptop!
Mr Alex Fortis@nyanbinary @LucasWerkmeister from defender to offender to slopfender
bws@nyanbinary maybe the 11 in windows 11 meant the cvss score?
Cat 🐈🥗 (D.Burch) 
@nyanbinary I'm sure they learned their lesson and won't let it ever happen again! 
rk: it’s hyphen-minus actuallyWas it Defender that would execute JS without a sandbox and was trivially exploitable like…a few years ago? I think that was them.
Hovav Shacham@rk @catsalad @nyanbinary Yup, in 2017. @natashenka had a PoC that fit in a tweet.
Billy O'Neal
Viss
swym@nyanbinary they should fire more engineers, so they have more funds for copilot tokens