Back to CVE Browser

CVE-2026-33825

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score83.5940%

EPSS Percentile91.30th

Published2026-04-14

Last Modified2026-07-24

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Affected Platforms (CPE)

📦

Microsoft

Defender Antimalware Platform

< 4.18.26030.3011

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33825

🔗 https://www.huntress.com/blog/nightmare-eclipse-intrusion

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Daily Global Cyber Threat Intelligence Digest — July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Daily Global Cyber Threat Intelligence Digest — July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

Related Vulnerabilities

CVE-2026-546938.2

ZITADEL is an open source identity management platform. From 2.43.0 through 2.71.19, from 3.0.0 until 3.4.11, and from 4.0.0 until...

CVE-2026-474838.2

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncon...

CVE-2026-624278.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-624268.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...