CVE-2026-69414
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak".
Risk Assessment
Elevation of privilege could allow an attacker to gain higher privileges on the system, potentially leading to full system compromise.
Recommendation
Apply security updates for Microsoft Defender and Malware Protection Engine when available.
Other vulnerabilities in Microsoft Malware Protection Engine
See all- CVE-2017-8558High
The Microsoft Malware Protection Engine on various Windows versions improperly scans a specially crafted file, leading to memory corruption. This may allow for remote code execution.
- CVE-2017-0290High
The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to memory corruption. This may allow for remote code execution.
- CVE-2026-50656High
A vulnerability in the Microsoft Malware Protection Engine in Microsoft Defender allows elevation of privilege. This flaw, publicly known as "RoguePlanet", could be exploited by an attacker to gain higher privileges on the system.
Original NVD description (English source)
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
Vulnerability data from NVD (NIST) · CISA KEV · EPSS