Product
Microsoft Defender Denial of Service Vulnerability (CVE-2026-45498)
2 rules 1 TTP 1 CVECVE-2026-45498 is a denial-of-service vulnerability in Microsoft Defender that could disrupt endpoint protection capabilities, requiring timely mitigation per vendor instructions.
CVE-2026-41091 - Microsoft Defender Link Following Vulnerability
2 rules 1 TTP 1 CVECVE-2026-41091 is a link following vulnerability in Microsoft Defender that allows an authorized attacker to escalate privileges locally.
CVE-2026-45584 - Microsoft Defender Heap-based Buffer Overflow RCE
2 rules 1 TTP 1 CVECVE-2026-45584 is a heap-based buffer overflow vulnerability in Microsoft Defender that allows an unauthorized attacker to execute arbitrary code over a network.
Multiple Vulnerabilities in Microsoft Defender and Malware Protection Engine
2 rules 3 TTPsMultiple vulnerabilities in Microsoft Defender and Microsoft Malware Protection Engine could allow an attacker to elevate privileges, execute arbitrary code, and cause a denial of service condition.
Komari Agent Abused as SYSTEM-Level Backdoor
2 rules 4 TTPs 2 IOCsThreat actors are abusing the Komari monitoring agent, a project hosted on GitHub, as a SYSTEM-level backdoor following initial access through compromised VPN credentials and lateral movement via Impacket.