Vulnerability Details CVE-2026-33825
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.067
EPSS Ranking 93.3%
CVSS Severity
CVSS v3 Score 7.8
Proposed Action
Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.
Ransomware Campaign
Known
References
Products affected by CVE-2026-33825
-
cpe:2.3:a:microsoft:defender_antimalware_platform:-
-
cpe:2.3:a:microsoft:defender_antimalware_platform:4.18.26020.6