Nov 2026: Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-122194 Published on November 10, 2026
Microsoft Defender Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2026-122194
Want to know whenever a new CVE is published for Microsoft Malware Protection Engine? stack.watch will email you.
Affected Versions
Microsoft Malware Protection Engine:- Version 1.1.0.0 and below 1.1.26100.4 is affected.