CVE-2026-33825

Microsoft Defender allows local privilege escalation via insufficient access control granularity, enabling ransomware-linked attackers to bypass security controls.

This critical vulnerability in Microsoft Defender permits authorized attackers to escalate privileges locally, undermining the security posture of DIB organizations relying on Defender for compliance. Because it is actively exploited and linked to ransomware, it poses an immediate threat to data integrity and confidentiality, requiring immediate patching and access control review.

Shame score — A critical, actively exploited vulnerability in a core security product that enables ransomware-linked privilege escalation.