tldrdailynews.com logo

Two Actively Exploited Defender Flaws Prompt Auto-Patch Rollout

1 min read
Source: The Hacker News
Two Actively Exploited Defender Flaws Prompt Auto-Patch Rollout
Photo: The Hacker News
TL;DR

Microsoft warns that Defender is under active exploitation due to a privilege-escalation flaw (CVE-2026-41091) and a separate denial-of-service flaw (CVE-2026-45498). Updates are delivered automatically via Defender Antimalware Platform versions 1.1.26040.8 and 4.18.26040.7, and systems with Defender disabled are not affected. CISA has added both flaws to its Known Exploited Vulnerabilities catalog, with a June 3, 2026 patch deadline for Federal Civilian Executive Branch agencies. The article also references older Microsoft CVEs that have been added to KEV in recent weeks.

Topics:technologysecurity#cve-2026-41091#cve-2026-45498#denial-of-service#microsoft-defender#privilege-escalation#security
Share this article
  1. Microsoft Warns of Two Actively Exploited Defender Vulnerabilities  The Hacker News
  2. New Microsoft Defender exploits discovered. How to protect yourself  mashable.com
  3. Microsoft warns of new Defender zero-days exploited in attacks  BleepingComputer
  4. Microsoft Defender vulnerabilities are being exploited in the wild  Security Boulevard
  5. Attacked MS Defender vulnerabilities and BitLocker protection measures  heise online

Want the full story? Read the original reporting

Read on The Hacker News