CVE-2026-54123
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker could access sensitive security-related data, potentially weakening the organization's protection.
Recommendation
Update Microsoft Defender for Endpoint and monitor local access permissions to data.
Other vulnerabilities in Microsoft Defender for Endpoint
See all- CVE-2026-56178Medium
Microsoft Defender for Endpoint contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-45647Medium
Microsoft Defender for Endpoint has a time-of-check time-of-use (TOCTOU) race condition vulnerability. An authorized attacker can elevate privileges locally.
- CVE-2023-21809High
Security feature bypass vulnerability in Microsoft Defender for Endpoint.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS