https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584
One job. You had one job.
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584
One job. You had one job.
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Successful exploitation of this vulnerability would require a remote, unauthenticated attacker to entice a local user to take multiple actions that results in Defender scanning a malicious file that has been quarantined.
This is something I love about some AV vulnerabilities - intentionally triggering detections as part of exploitation. Also had that with the Nightmare Eclipse Defender vulns & also had me giggle there
. I just ... feels right!