Exploited vulnerabilitiesBriefConfirmed by two or more outlets
Microsoft Defender local privilege escalation and DoS (CVE-2026-41091 / -45498)
Exploited in the wild. Fixed in Defender platform 4.18.26040.7.
- Disclosed
Live scores
Live scores
CVE-2026-41091- EPSS
- 0.082
some chance of attack soon - VEDAS
- 0.970
strong exploit evidence - On CISA KEV
- Yes, since 2026-05-20
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2026-45498- EPSS
- 0.631
very likely to be attacked soon - VEDAS
- 0.659
some exploit evidence - On CISA KEV
- Yes, since 2026-05-20
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.