high7.8Known exploited

CVE-2026-33825

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Exploited in the wild

This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-04-22. Federal due date: 2026-05-06.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Impact

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

Affected products

Vendor	Product	Affected versions
Microsoft	Defender Antimalware Platform	before 4.18.26030.3011

Weakness classification

CWE-1220

References

NVD record
CVE.org record
CISA KEV catalog
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33825
https://www.huntress.com/blog/nightmare-eclipse-intrusion