CVE-2026-33825

HIGH7.8

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-1220

Vendorsmicrosoft

Affected products

Vendors	Prodotto	Versioni
microsoft	defender antimalware platform	< 4.18.26030.3011

Ransomware

SharePoint: CISA Confirms Ransomware Exploitation of CVE-2026-45659

CISA confirms ransomware exploitation of SharePoint CVE-2026-45659 vulnerability. Patch servers and enable AMSI to prevent code execution and network breaches.

Aug 11, 20262 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

SharePoint: CISA Confirms Ransomware Exploitation of CVE-2026-45659