CVE-2026-33825KEV · OVERDUECWE-1220

Microsoft Defender Elevation of Privilege Vulnerability

High · published April 14, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 33.0th percentile for exploit probability.

171
days past CISA
deadline
CVSS v3.1
7.8
EPSS
0%
Percentile
33.0
In the wild
Confirmed
What it is

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2026-04-14T16:57Z
KEV added
2026-04-22 · due 2026-05-06
EPSS history
Timeline
  • 22 APR 00:00Z
    Added to CISA KEV — remediate by May 6
    kev
  • 14 APR 16:57Z
    Microsoft Defender Elevation of Privilege Vulnerability
    cvelistv5