CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
Other sources
Microsoft Defender Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.26090.9
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must already be authorized on the affected system and have local access. The provided vector indicates low privileges are required and no user interaction is needed.
What is the impact of successful exploitation?
Successful exploitation can disclose information. The supplied severity vector indicates high confidentiality impact, with no integrity or availability impact.
Is this remotely exploitable?
No. The provided attack vector is local, so exploitation requires access to the affected machine.