CVE-2026-50657
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Vexday Risk Score
33Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Proof of concept
Public proof of concept exists, but not yet automated.
CVSS 4.7EPSS 0.4%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado
Lifecycle
14 Jul 2026Published on NVD
15 Jul 2026Public PoC
Weaponization speed
same dayto first PoC
Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.
Recommendation: Plan a near-term fix — a public PoC already exists.
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft Defender for Endpoint for Macpublic PoCs found — 1
githubgithub.com/NeseOS-Corp/CVE-2026-50657★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.