Newly disclosed vulnerability in Microsoft Defender for Endpoint (CVE-2025-26684) exposes systems to local privilege escalation attacks by exploiting improper handling of file paths.
Rated Important with a CVSS score of 6.7, the flaw enables authenticated attackers with high privileges to manipulate file names or paths and execute arbitrary code.
https://gbhackers.com/microsoft-defender-vulnerability/