CVE-2026-69414

Summary

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Malware Protection Engine1.1.0.0 < 1.1.26080.3affected

Weaknesses

  • CWE-284: CWE-284: Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

Additional References

References