high7.8Public exploit code
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Defender for Endpoint (MDE) - Elevation of Privilege2025-07-08 · local · multiple
Impact
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Defender For Endpoint | before 101.25022.0002 |