Actively exploited in the wild
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft - Defender · Listed in the CISA KEV since 2026-04-22. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-33825
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can escalate privileges, potentially leading to system integrity compromise and access to protected resources.
Recommendation
Apply the latest Microsoft Defender security updates available via Windows Update.
Original NVD description (English source)
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.