Microsoft disclosed CVE-2026-45584 on May 19, 2026, as a critical remote code execution flaw in the Microsoft Malware Protection Engine, affecting engine versions through 1.1.26030.3008 and fixed in version 1.1.26040.8 across Defender-backed antimalware products. The bug is a reminder that...
Microsoft disclosed CVE-2026-41091 on May 20, 2026, as a high-severity Microsoft Defender elevation-of-privilege flaw in the Microsoft Malware Protection Engine, fixed in engine version 1.1.26040.8 after affecting version 1.1.26030.3008 and earlier. The bug is not a classic “click this file and...