High severity8.8NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026
CVE-2026-21537
CVE-2026-21537
Description
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.
Affected products
3cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:linux:*:*
- (no CPE)range: 101.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21537nvdVendor Advisory
News mentions
0No linked articles in our index yet.