What Happened
Critical Vulnerabilities Enable Local Attackers to Elevate Privileges
Two newly disclosed Microsoft Defender vulnerabilities, tracked as CVE-2026-41091 and CVE-2026-45498, are being actively exploited in the wild, enabling local attackers to elevate privileges to SYSTEM and potentially disrupt endpoint protection across Windows environments, according to CyberSecurityNews.