CVE-2026-69414

HIGH7.8Published on August 14, 2026

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-284, CWE-269

Vendorsmicrosoft

Affected products

Vendors	Prodotto	Versioni
microsoft	malware protection engine	-

Microsoft corregge 22 falle: Entra ID già messo in sicurezza, ma ShieldBreak resta senza patch

Cloud Security

Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched

Microsoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.

Aug 24, 20264 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched