PT-2026-32884 · Microsoft · Defender Antimalware Platform

Diffract + 2 · Published 2026-04-14 · Updated 2026-04-15 · CVE-2026-33825

X.com · Maxprotectsoc

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

@The Cyber News CVE-2026-33825 in Defender proves a critical point: your default OS security shouldn't become the attack vector. If an attacker gains local access, they shouldn't get a free pipeline to SYSTEM privileges due to access-control flaws.

Fix

LPE

Weakness Enumeration

CWE-1220

Related Identifiers

CVE-2026-33825

Affected Products

Defender Antimalware Platform

References · 16

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33825 · Security Note
• https://twitter.com/joepettit2/status/2044401715684782421 · Twitter Post
• https://twitter.com/fortraofficial/status/2044397190680891840 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2044340059671781561 · Twitter Post
• https://twitter.com/Maxprotectsoc/status/2044388500225847759 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2044470993956069752 · Twitter Post
• https://twitter.com/TheHackersNews/status/2044362588201570632 · Twitter Post
• https://twitter.com/horizon_secured/status/2044116460465783088 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2044438576864104803 · Twitter Post
• https://twitter.com/4A4556494C/status/2044404656080634089 · Twitter Post
• https://twitter.com/CVEnew/status/2044358632540709005 · Twitter Post
• https://twitter.com/NetSecIO/status/2044408406841160169 · Twitter Post
• https://twitter.com/TweetThreatNews/status/2044170104154226759 · Twitter Post
• https://twitter.com/Mahendrak29/status/2044244775340257720 · Twitter Post