Main
Vulnerability Database
Exploits
ID:12894 - Exploit for Link following in Microsoft Malware Protection Engine - CVE-2026-41091
ID:12894 - Exploit for Link following in Microsoft Malware Protection Engine - CVE-2026-41091
Published: August 14, 2026
Vulnerability identifier: #VU132035
Vulnerability risk: High
CVE-ID: CVE-2026-41091
CWE-ID: CWE-59
Exploitation vector: Local access
Vulnerable software:
Microsoft Malware Protection Engine
Microsoft Malware Protection Engine
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to an insecure link following issue. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with elevated privileges.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install updates from vendor's website.