CVE-2026-50658: Microsoft Defender For Endpoint

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Defender For Endpoint: from 101.0.0, before 101.26042.0020 (fixed in 101.26042.0020)

Published 2026-07-14. Last modified 2026-07-22.