SaibaRadar

CVE-2026-56178 — Vulnerability intelligence

microsoft — defender for endpoint

Published:

CVSS
5.5
CISA KEV
Not listed; not proof of no exploitation

Original source text (not a translation)

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Sources