External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26684 | Vendor Advisory |
Configurations
History
19 May 2025, 18:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:microsoft:defender_for_endpoint:*:*:*:*:*:linux:*:* | |
| References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26684 - Vendor Advisory | |
| CWE | CWE-610 | |
| First Time |
Microsoft
Microsoft defender For Endpoint |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
13 May 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 17:15
Updated : 2025-05-19 18:22
NVD link : CVE-2025-26684
Mitre link : CVE-2025-26684
JSON object : View
Products Affected
microsoft
- defender_for_endpoint
CWE
CWE-610
Externally Controlled Reference to a Resource in Another Sphere