Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-69414
By Ron Shemesh |
24 August 2026
Microsoft Defender Malware Protection Engine improper access control enables local privilege escalation
An elevation-of-privilege flaw in Microsoft Defender’s Microsoft Malware Protection Engine (microsoft:malware_protection_engine, versions -) allows a local attacker with PR:L to gain higher privileges (CVSS 3.1 7.8). Public PoC is available (ShieldBreak). Apply the Microsoft MSRC update for CVE-2026-69414 when released and restrict local untrusted access where possible.