What does this mean?
- NCSC rates the likelihood of abuse as medium and the possible impact as high.
- 3 vulnerabilities. See "Show CVE information" for each CVE.
- Affects: Microsoft Configuration Manager 2503, Microsoft Configuration Manager 2509, Microsoft Configuration Manager 2603, Microsoft Configuration Manager 2603 on .NET Core 2.1, Microsoft Defender for Endpoint for Linux, Windows Defender.
- What should you do? Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
Microsoft heeft kwetsbaarheden verholpen in de Configuration Manager en Defender. Een lokale kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen en mogelijk toegang te krijgen tot gevoelige gegevens.
Microsoft Configuration Manager: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-88075 | 8.80 | Verkrijgen van verhoogde rechten | |------------------|------|-------------------------------------|
Microsoft Defender for Endpoint: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-102204 | 7.80 | Verkrijgen van verhoogde rechten | |------------------|------|-------------------------------------|
Microsoft Defender: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-70264 | 5.50 | Toegang tot gevoelige gegevens | |------------------|------|-------------------------------------|
Show CVE information (3)
What kind of flaw is this?
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
The software follows a shortcut or link to a file it should not use. - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Input ends up unfiltered in a database query (SQL injection).
Key facts
Revisions
| Version | Date | Note |
|---|---|---|
| 1.0.0 | 13-10-2026 20:55 CEST | Initiele versie |
Description
Microsoft heeft kwetsbaarheden verholpen in de Configuration Manager en Defender.
Interpretation
Een lokale kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen en mogelijk toegang te krijgen tot gevoelige gegevens.
Microsoft Configuration Manager:
|------------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|------------------|------|-------------------------------------|
| CVE-2026-88075 | 8.80 | Verkrijgen van verhoogde rechten |
|------------------|------|-------------------------------------|
Microsoft Defender for Endpoint:
|------------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|------------------|------|-------------------------------------|
| CVE-2026-102204 | 7.80 | Verkrijgen van verhoogde rechten |
|------------------|------|-------------------------------------|
Microsoft Defender:
|------------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|------------------|------|-------------------------------------|
| CVE-2026-70264 | 5.50 | Toegang tot gevoelige gegevens |
|------------------|------|-------------------------------------|
Solutions
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
https://portal.msrc.microsoft.com/en-us/security-guidance
Products
Microsoft Configuration Manager 2503, Microsoft Configuration Manager 2509, Microsoft Configuration Manager 2603, Microsoft Configuration Manager 2603 on .NET Core 2.1, Microsoft Defender for Endpoint for Linux, Windows Defender
Source: NCSC CSAF advisory (CC0). Original at NCSC →
This is in the weekly digest for week 42: everything that changed in Microsoft 365 this week. →
Read the full advisory at NCSC → ← All security advisories
Source: NCSC, reused under CC0. 365Fanatic is not affiliated with NCSC.
