CVE-2026-33825: Microsoft Defender Insufficient Granularity of Access Control Vulnerability
CVE-2026-33825 affects Microsoft Defender and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-22.