CVE-2026-54123CWE-200information-disclosure

CVE-2026-54123

Medium · published August 11, 2026

CVSS v3.1

5.5

EPSS

Percentile

40.3

In the wild

Unconfirmed

What it is

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00479 · 40.3th percentile
Weakness: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published: 2026-08-11T21:18Z

Affected products (1)

Product	Versions	Fixed in
microsoft/defender_for_endpoint	≥ 101.0.0, < 101.26042.0020	101.26042.0020

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54123 · [email protected]

EPSS history

Timeline

11 AUG 17:04Z
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
cvelistv5