RaqibCTI
CVE

CVE-2026-41091

P2
Microsoft Defender Link Following Vulnerability
Microsoft · Defender
Date added (CISA)
2026-05-20
Remediation due
2026-06-03
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.

Source: NVD ↗ · CISA KEV Catalog ↗