CVE-2026-21537

Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability

CVSS 8.8 HIGHEPSS 0.5%CWE-94

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

10 feb 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Productos afectados

Microsoft · Microsoft Defender for Endpoint for Linux

Referencias

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21537