CVE-2026-41091 1

CVE-2026-41091: Microsoft Defender Link Following Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 20, 2026

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.

Vulnerabilities & Patching