CVE-2026-41091

7.8 highKEVEPSS 8.2%

High (7.8) in Microsoft Defender. In CISA KEV since 2026-05-20. EPSS 8.2% chance of exploitation in the next 30 days.

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Severity

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2026-05-20, due 2026-06-03
CWE: CWE-59
Published: 2026-05-20
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19