Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
| Vendor | Product | Versions |
|---|---|---|
| microsoft | microsoft malware protection engine | - |
Added affected versions 1.1.26040.8 and 4.18.26040.7, and included new tag AV26-489.
Marked exploit as available and added new tag for CVE-2026-45498.
Updated severity to CRITICAL, noted that no exploit is available, and set patchAvailable to null.
Initial creation
