CVE-2026-45647: Microsoft Defender For Endpoint

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Defender For Endpoint: before 101.26042.0011 (fixed in 101.26042.0011)

Published 2026-06-09. Last modified 2026-07-23.