CVE-2025-59497: Microsoft Defender For Endpoint

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.

Affected products

• Microsoft Defender For Endpoint: before 101.25032.0010 (fixed in 101.25032.0010)

Published 2025-10-14. Last modified 2026-10-08.