Description
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Defender for Endpoint for Linux | 101.0.0 – < 1.0.9.0 | 1.0.9.0 |
Advisories 2
- WID-SEC-2026-0364 Microsoft Defender für Endpoint Linux Extension: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Feb 10, 2026
- MSRC-CVE-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability Microsoft Security Response Center · Feb 10, 2026
References
- Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability vendor-advisory patch