Sploitus

CVE-2026-33825

4 known exploits for CVE-2026-33825

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Affected products
Defender
Microsoft Defender Antimalware Platform
< 4.18.26030.3011
CVSS 3.1
7.8 HIGH
EPSS
6.7% (93th percentile)
Weakness
CWE-1220
NVD status
Analyzed
Published
2026-04-14
CVE-2026-33825 at NVD
Authoritative description, scoring and affected products

4 known exploits for CVE-2026-33825

Proof-of-concept code and exploit modules indexed by Sploitus

Nightmare-Windows-0-day-exp
2026-08-09 s4m98GITHUB
Exploit for Link Following in Microsoft
2026-05-21 0xBlackashGITHUB
Exploit for Insufficient Granularity of Access Control in Microsoft
2026-05-02 Joe1snGITHUB
Exploit for Insufficient Granularity of Access Control in Microsoft
2026-04-22 kaleth4GITHUB