CVE-2026-69414

Katalog CVE

CVSS 7.8 · High EPSS 1,3%

Kerentanan Improper Access Control pada microsoft malware protection engine. Skor CVSS 3.1 7.8 (High) menurut microsoft.com.

Deskripsi (NVD)

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

3 September 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-269: Improper Privilege Management

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414 advisory vendor
• https://github.com/MSNightmare/ShieldBreak