CVE Catalog
Actively exploited in the wild
Microsoft Defender Denial of Service Vulnerability
Microsoft - Defender · Listed in the CISA KEV since 2026-05-20. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-45498
MediumCVSS 4.0KEVExploitation Probability (EPSS)
Very high risk63.08%
99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Defender Denial of Service Vulnerability.
Risk Assessment
An attacker could cause the Defender service to crash or become unavailable, weakening system protection against malware.
Recommendation
Install the latest Microsoft Defender security updates.
Original NVD description (English source)
Microsoft Defender Denial of Service Vulnerability