NetSight
medium5.5

CVE-2026-56178

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Impact

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftDefender For Endpoint
from 101.0.0 before 101.26042.0020
MicrosoftMicrosoft Defender For Endpoint For Mac
from 101.0.0 before 101.26042.0020

Weakness classification

References