CVE-2026-41091

Microsoft Defender Link Following Vulnerability

Malware Protection Engine

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

20. Mai 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41091
• CISA
  Microsoft Defender Link Following Vulnerability
• NVD
  CVE-2026-41091