VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

CVE-2026-69414: ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw

3 karet z 7 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-69414

EPSS 0.01 EPSS k 18. 10. 2026

Hodnocení závažnosti

7.8 CVSS 3.1 microsoft

útok z místního přístupu bez přípravy stačí běžný účet bez zásahu uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

SPOJENO PŘES CVE New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldCrash" right after Microsoft rolled out its September 2026 Patch Tuesday security updates. [...]

EPSS 0.01 CVE-2026-69414 Microsoft US

tg: zranitelnost

· BleepingComputer · New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access · Malwarebytes Labs · ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw · Microsoft Security · CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

SPOJENO PŘES CVE CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak (CVE-2026-69414) is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigned the CVE on August 14, and no patch is available yet. Qualys VMDR provides detection across Windows environments, and Qualys TruRisk Eliminate offers a mitigation that teams can apply now, with…

EPSS 0.01 CVE-2026-50656 CVE-2026-69414 Microsoft US

tg: zranitelnost tg: rozbor tg: propagace

· Qualys · CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

· zachyceno