Time-of-Check Time-of-Use Race Condition in Microsoft Defender

CVE-2026-50658

What is CVE-2026-50658?

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Endpoint on Mac can facilitate an authorized attacker in elevating their privileges locally. This vulnerability highlights the risks associated with improper validation of application state, emphasizing the need for robust security practices to mitigate potential exploitation. Users are advised to apply the latest security updates as outlined in Microsoft’s advisory.

References