Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Defender, Microsoft Configuration Manager und Microsoft Windows Defender ausnutzen, um Administratorrechte zu erlangenoder vertrauliche Informationen offenzulegen.
Product
Microsoft Defender ist eine Software zur Erkennung von schädlicher Software (Malware).
Microsoft Configuration Manager, vormals bekannt als System Center Configuration Manager (SCCM), ist eine Software zur Systemverwaltung, die es Unternehmen ermöglicht, große Gruppen von Computern, Servern und Mobilgeräten zu verwalten, bereitzustellen und zu überwachen.
Windows Defender ist in Windows integriert, um Ihren PC in Echtzeit vor Viren, Spyware und anderer Schadsoftware zu schützen.
Vulnerabilities 5
-
High 8.8
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
-
High 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Defender Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-105726
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726
-
Microsoft Security Advisory CVE-2026-102204
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204
-
Microsoft Security Advisory CVE-2026-88075
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075
-
Microsoft Security Advisory CVE-2026-70049
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049
-
Microsoft Security Advisory CVE-2026-70264
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264