cve 2026 45647

CVE-2026-45647 is an elevation-of-privilege vulnerability in Microsoft Defender for Endpoint for Mac, published by Microsoft on June 9, 2026. The flaw affects the enterprise endpoint agent used in mixed Windows and macOS environments, placing a security risk in software that holds privileged access on endpoints. Discussions on WindowsForum highlight the broader trust implications when security products themselves become attack vectors. Administrators are advised to review Microsoft's Security Update Guide entry for CVE-2026-45647 and apply the necessary patches to mitigate the vulnerability in Defender for Endpoint deployments.