CVE-2026-50657: Microsoft Defender For Endpoint

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

Affected products

• Microsoft Defender For Endpoint: from 101.0.0, before 101.26042.0020 (fixed in 101.26042.0020)

Published 2026-07-14. Last modified 2026-07-22.