CVE-2026-70264

No fix known EPSS <1%CVSS 5.5

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft Windows Defender