Microsoft Defender Elevation of Privilege Vulnerability

Microsoft Defender incorrectly handles file links, allowing an authorized user on your computer to gain higher privileges and take control of the system. This is a local attack that requires someone with basic access to exploit.

CWE-59 (link following) vulnerability in Microsoft Defender's file access mechanism allows privilege escalation when an authenticated local user can manipulate symbolic or hard links to redirect file operations. The vulnerability requires local access and valid credentials but bypasses privilege boundary controls.