CVE-2026-55012: Microsoft Defender Remote Code Execution Vulnerability
Published Jul 14, 2026
·Updated
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Defender Remote Code Execution Vulnerability
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Microsoft Defender
Microsoft Malware Protection Engine<1.1.26060.3008
1.1.26060.3008
Microsoft Malware Protection Engine<1.1.26060.3008
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.26060.3008
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software