CVE-2026-105726: Microsoft Defender Information Disclosure Vulnerability
Overview
- Severity
- Medium (CVSS 5.5)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- Category
- Information Disclosure
- Exploit Status
- Not Exploited
- Exploitation Likelihood
- Less Likely
- Patch Tuesday
- 2026-Oct
- Released
- 2026-10-13
Description
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
FAQ
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
Affected Products (1)
System Center
- Microsoft Defender for Endpoint for Windows
Acknowledgments
Anonymous
Revision History
- 2026-10-13: Information published.