CVE-2024-43614: Microsoft Defender For Endpoint

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

Affected products

• Microsoft Defender For Endpoint: before 101.24052.0002 (fixed in 101.24052.0002)

Published 2024-10-08. Last modified 2026-06-17.