Oct 2026: Microsoft Defender Information Disclosure Vulnerability
CVE-2026-70264 Published on October 13, 2026
Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
Weakness Type
What is an insecure temporary file Vulnerability?
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CVE-2026-70264 has been classified to as an insecure temporary file vulnerability or weakness.
Products Associated with CVE-2026-70264
Want to know whenever a new CVE is published for Microsoft Windows Defender? stack.watch will email you.
Affected Versions
Microsoft Windows Defender:- Before 1.1.26090.9 is affected.