CVE Watch—

CVE-2026-33825

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

CVSS

—

Sin CVSS

EPSS

6.7%

p93

KEV

SÍ

22 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

6.7%EPSS · 30 días6.7%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / Defender

Vulnerabilidad

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Añadido a KEV

22 abr 2026

Remediar antes de

6 may 2026

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825 ; https://nvd.nist.gov/vuln/detail/CVE-2026-33825

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-44698—

99.5%

KEV—80Microsoft Defender SmartScreen Security Feature Bypass Vulnerability—CVE-2026-45498—

99.1%

KEV—80Microsoft Defender Denial of Service Vulnerability—CVE-2021-1647—

98.5%

KEV—80Microsoft Defender Remote Code Execution Vulnerability—CVE-2026-41091—

94.3%

KEV—78Microsoft Defender Link Following Vulnerability—