Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Defender CVE-2021-1647

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-1647

Defender

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-1647
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3598 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:37:58 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file. CISA required action: Apply updates per vendor instructions.

Defender CVE-2022-44698

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-44698

Defender

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-44698
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1394 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:01 GMT
Publisher date: Tue, 13 Dec 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Defender CVE-2026-33825

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2026-33825

Defender

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-33825
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #178 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:41:59 GMT
Publisher date: Wed, 22 Apr 2026 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Defender Denial of Service Vulnerability

Microsoft Defender contains an unspecified vulnerability that allows for denial of service. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Defender CVE-2026-45498

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2026-45498

Defender

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-45498
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #167 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:41:52 GMT
Publisher date: Wed, 20 May 2026 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Defender Link Following Vulnerability

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Defender CVE-2026-41091

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2026-41091

Defender

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-41091
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #163 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:41:50 GMT
Publisher date: Wed, 20 May 2026 00:00:00 GMT

Read the original announcement