CVE-2025-26684: Microsoft Defender For Endpoint

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Defender For Endpoint: before 101.25032.0008 (fixed in 101.25032.0008)

Published 2025-05-13. Last modified 2026-06-17.