CVE-2026-45584

—

CVSS 3.1

8.1 high

EPSS

<1%p56

Published

May 20, 2026 (May 20, 2026)

Modified

Jul 23, 2026

Description

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: malware protection engine
Weakness: CWE-122
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news3 stories

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

The Hacker NewsMay 26, 07:28 UTC · May 26, 2026Vulnerability in the wildCVE-2026-41091 CVE-2026-45498 CVE-2026-33825+7 CVEs

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Exploit / PoC in the wildCVE-2026-41091 CVE-2026-45498 CVE-2026-45584+2 CVEs

60