CVE-2026-105726: Microsoft Defender Information Disclosure Vulnerability
Published Oct 13, 2026
·Updated
Microsoft Defender Information Disclosure Vulnerability
Other sources
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Microsoft Defender
Microsoft Defender for Endpoint for Windows<4.18.26060.3008
4.18.26060.3008
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.18.26060.3008
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker must already be authorized on the affected system and have local access. The available information does not indicate that remote exploitation or user interaction is required.
2
What is the potential impact?
Successful exploitation can disclose information through an out-of-bounds read. The provided data does not indicate an integrity or availability impact.
3
Which products are identified as affected?
The listed affected software is Microsoft Defender and Microsoft Defender for Endpoint for Windows.