CVE-2026-54123

Published: Aug 11, 2026Modified: Aug 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

Affected (1)

Products: Microsoft: Defender For Endpoint

Microsoft

1 product

Defender For Endpoint

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Defender For Endpoint	From 101.0.0 to 101.26042.0020

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54123

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.