Elevation of Privilege Vulnerability in Microsoft Defender for Endpoint
CVE-2025-26684

6.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Defender For Endpoint For Linux
Vendor
CVE Published:
13 May 2025

What is CVE-2025-26684?

An elevation of privilege vulnerability exists in Microsoft Defender for Endpoint due to external control of file names or paths. An authorized attacker could exploit this flaw to execute arbitrary code with elevated privileges, which can lead to unauthorized access and manipulation of sensitive system components. Proper safeguards and timely updates are essential to mitigate associated risks and protect organizational assets.

Affected Version(s)

Microsoft Defender for Endpoint for Linux Unknown 101.0.0 < 101.25032.0010

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.