Loading feed…
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorised attacker to escalate privileges locally.
Confirm whether Microsoft Windows Server is in your estate.
all High · vulnerabilities · exploited in the wild
Updated
An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute…
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorised attacker to escalate privileges locally. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.
End of feed