Information Disclosure Vulnerability in Microsoft Defender for Endpoint
CVE-2026-50657

4.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Defender For Endpoint For Mac
Vendor
CVE Published:
14 July 2026

What is CVE-2026-50657?

An information disclosure vulnerability exists in Microsoft Defender for Endpoint for Mac that may allow an authorized attacker to access sensitive personal information of users. This exploitation could enable the unauthorized disclosure of private data, posing a significant privacy risk to individuals. It is crucial for users to stay informed and apply security updates to mitigate this vulnerability effectively.

Affected Version(s)

Microsoft Defender for Endpoint for Mac 101.0.0 < 101.26042.0020

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.