NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-45584

CVSS 3.1: 8.1 high
EPSS: <1%p56
Published: May 20, 2026 · May 20, 2026
Modified: Jul 23, 2026

Analyze CVE-2026-45584 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

Vendors: microsoft

Products: malware protection engine

Weakness: CWE-122

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

3 stories

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

The Hacker NewsMay 26, 07:28 UTC · May 26, 2026VulnerabilityExploitedCVE-2026-41091 CVE-2026-45498 CVE-2026-33825+71

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026MalwareExploitedCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+311 · 1 read

60

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Exploit / PoCExploitedCVE-2026-41091 CVE-2026-45498 CVE-2026-45584+22

60