VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

CVE-2026-69414

3 karet z 6 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-69414

EPSS 0.01

Hodnocení závažnosti

7.8 CVSS 3.1 microsoft

útok z místního přístupu bez přípravy stačí běžný účet bez zásahu uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

1

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak (CVE-2026-69414) is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigned the CVE on August 14, and no patch is available yet. Qualys VMDR provides detection across Windows environments, and Qualys TruRisk Eliminate offers a mitigation that teams can apply now, with…

EPSS 0.11 CVE-2026-50656 CVE-2026-69414 Microsoft Qualys US

Qualys ·

2

ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw

Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn’t always close every route to the same result. Microsoft has assigned ShieldBreak the identifier CVE-2026-69414 and confirmed it is an elevation of privilege (EoP) vulnerability in the Microsoft Malware Protection Engine. Microsoft says it is still working on a security update. If that sounds somehow familiar, you’re probably…

EPSS 0.01 CVE-2026-69414 Microsoft US 3 zdrojů

Malwarebytes Labs · BleepingComputer · Microsoft Security