CVE-2026-54123

Analyzed Analyzed - Analysis Complete

Microsoft Defender for Endpoint Information Disclosure

Publication date: 2026-08-11

Last updated on: 2026-08-17

Assigner: Microsoft Corporation

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-17

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-54123

EUVD

EUVD-2026-56418

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	defender_for_endpoint	From 101.0.0 (inc) to 101.26042.0020 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure issue in Microsoft Defender for Endpoint. An authorized attacker with local access can exploit it to expose sensitive information that should not be accessible to unauthorized parties.

Impact Analysis

If you use Microsoft Defender for Endpoint, an attacker with local access to your system could potentially steal sensitive data such as credentials, personal information, or other confidential files stored or processed by the software.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR, HIPAA, or other privacy regulations. Organizations may face compliance breaches if attackers exploit this to access protected health information or personally identifiable data.

Mitigation Strategies

Apply the latest security updates from Microsoft for Defender for Endpoint to patch the vulnerability. Monitor Microsoft's official advisory for additional guidance.

Hi! I’m here to help you understand CVE-2026-54123. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70