CVE-2026-33825

Severity

HIGH

CVSS

7.8

EPSS

0.06749

Risk score

58.56

CISA KEV

Yes

PoC

Published

2026-04-14

Modified

2026-06-19

First seen

2026-08-05

Aliases

EUVD-2026-22643, GHSA-8VP7-4RMV-4868

Products

Microsoft:Defender, Microsoft:Microsoft Defender Antimalware Platform 4.0.0.0 <4.18.26030.3011, microsoft:defender_antimalware_platform

Sources

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.