Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Microsoft security patch release for CVE-2026-41091 and CVE-2026-45498

Security Patch Release
First reported
Last updated
Happening score
H score 44
3 unique sources, 3 articles

Summary

Hide ▲

Microsoft rolled out security updates for Defender and related malware protection components to address two zero-days: CVE-2026-41091 and CVE-2026-45498. The fixes cover affected Microsoft Malware Protection Engine and Microsoft Defender Antimalware Platform versions reported in the disclosures. Both vulnerabilities were described as exploited in the wild. CVE-2026-41091 is a local privilege-escalation flaw, while CVE-2026-45498 is a denial-of-service issue. CISA added both to its Known Exploited Vulnerabilities catalog and urged federal agencies to patch by June 3.

Related Happenings

Microsoft September 2026 Patch Tuesday security updates (966 flaws)

Security Patch Release
H score54 First: 08.09.2026 21:18 Last: 08.09.2026 21:18 Sources 1

About this happening: Microsoft released its September 2026 Patch Tuesday updates for a record 966 flaws, including two actively exploited zero-days that can enable local SYSTEM privi...

Open Happening

Microsoft Defender for Office 365 Safe Links blocks legitimate Google search links

Service Disruption
H score0 First: 02.09.2026 13:29 Last: 02.09.2026 13:29 Sources 1

About this happening: Microsoft Defender for Office 365 Safe Links is blocking legitimate Google search links as malicious, preventing users from opening them normally and triggering warning pr...

Latest development: 02.09.2026 13:30

Microsoft is investigating a Defender for Office 365 Safe Links issue in which legitimate Google search links are incorrectly classified as malicious, causing users to see "Opening this website might not be safe" warnings when opening the blocked URLs. Microsoft also says IT administrators may see related alerts and incidents in Microsoft Sentinel and the Defender portal while it works to correct the misclassification.

Open Happening

Microsoft security patch release for CVE-2026-62911

Security Patch Release
H score32 First: 01.09.2026 15:38 Last: 01.09.2026 15:38 Sources 1

About this happening: Microsoft patched CVE-2026-62911 in Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) during the August 2026 Patch Tu...

Open Happening

Microsoft Defender Antivirus false 'turned off' alerts after latest updates

Security Tool/Service
H score11 First: 31.08.2026 11:29 Last: 31.08.2026 11:29 Sources 1

About this happening: Microsoft Defender Antivirus is showing false 'turned off' alerts after the latest updates, creating confusion on supported Windows client and server systems even though p...

Latest development: 18.09.2026 15:16

Microsoft fixed the Defender Antivirus false-status alert issue in Microsoft Defender Antivirus update version 4.18.26080.4, released on September 17. The update addresses erroneous Windows Security app notifications that said "Microsoft Defender Antivirus is turned off" even though protection remained active, across supported Windows client and server versions including Windows 11 26H1 and Windows Server 2025.

Open Happening

ServiceNow AI Platform security patch release (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820, CVE-2026-6876)

Security Patch Release
H score36 First: 28.08.2026 13:29 Last: 28.08.2026 13:29 Sources 1

About this happening: ServiceNow released patches for ServiceNow AI Platform flaws that could enable code injection, SQL injection, privilege escalation, and sandbox escape atta...

Open Happening

Timeline

  1. 21.05.2026 12:52 3 articles · 4mo ago

    Microsoft patches exploited Defender zero-days and CISA adds them to KEV

    Initial Disclosure

    Microsoft released patches for Microsoft Defender Antimalware Platform version 4.18.26040.7 to address CVE-2026-41091, a link-following privilege-escalation flaw that can let an authorized attacker elevate privileges locally to System, and CVE-2026-45498, a denial-of-service flaw. Microsoft said both vulnerabilities were publicly disclosed and exploited in the wild as zero-days. CISA added both flaws to its Known Exploited Vulnerabilities (KEV) list and urged federal agencies to patch them by June 3.

    Show sources
    Open in new tab
  2. 21.05.2026 10:49 2 articles · 4mo ago

    Microsoft rolls out patches for exploited Defender zero-days

    Mitigation Patch Update

    Microsoft started rolling out fixes for CVE-2026-41091 in Microsoft Malware Protection Engine 1.1.26030.3008 and earlier and CVE-2026-45498 in Microsoft Defender Antimalware Platform 4.18.26030.3011 and earlier after zero-day exploitation affected unpatched Windows devices; CISA also added both vulnerabilities to the KEV Catalog and ordered Federal Civilian Executive Branch agencies to secure Windows endpoints and servers within two weeks, by June 3, under Binding Operational Directive (BOD) 22-01.

    Show sources
    Open in new tab