CVE-2026-69414: Microsoft Defender Malware Protection Engine elevation of privilege

CVE-2026-69414 · Severity: high · CVSS 7.8 · Published 2026-08-14

Microsoft Defender's Malware Protection Engine contains an elevation of privilege vulnerability known as "ShieldBreak." This engine is a core component of Microsoft Defender antivirus that scans files and processes to detect and remove malware. An attacker could exploit this flaw to gain higher system privileges, potentially bypassing security controls and taking complete control of an affected computer.

Technologies: Microsoft Defender, Microsoft Malware Protection Engine. Vendors: Microsoft.

Quick answers

Is CVE-2026-69414 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-69414 being exploited in the wild.
How severe is CVE-2026-69414?
High severity, with a CVSS score of 7.8, published 14 August 2026.
Which products and versions are affected?
Microsoft Defender.
Is there a fix for CVE-2026-69414?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-69414 attacked?
It is attacked with local access.
Am I affected by CVE-2026-69414?
Check whether you run Microsoft Defender or Microsoft Malware Protection Engine. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an elevation of privilege (EoP) flaw in the Microsoft Malware Protection Engine, a critical component of Microsoft Defender antivirus. The specific root cause and attack vector are not publicly disclosed in the available advisory material. However, based on the reported CVSS score of 7.8 and classification as elevation of privilege, the flaw likely allows local or adjacent attackers to gain SYSTEM-level privileges on an affected system. The vulnerability has not been reported as actively exploited in the wild as of the publication date. Microsoft has issued a security update to address this issue.

Affected products

  • Microsoft Defender

Timeline

  • 2026-08-14: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.