Vulnerability · Published Aug 14, 2026 · Assigned by microsoft
CVE-2026-69414Microsoft Defender Elevation of Privilege Vulnerability
High 7.8
In plain English
A high-severity privilege mismanagement in Microsoft Malware Protection Engine from Microsoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)1.4%top 27.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Malware Protection Engine | 1.1.0.0 – before 1.1.26080.3 |
Weakness: CWE-59, CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
References
- Microsoft Defender Elevation of Privilege Vulnerability vendor-advisory, patch
- https://github.com/MSNightmare/ShieldBreak exploit