Known vulnerabilities in Defender for Endpoint for Linux

Vendor: Microsoft
Software: Defender for Endpoint for Linux
Software CPE: cpe:2.3:a:microsoft:defender_for_endpoint_for_linux:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Defender for Endpoint for Linux Defender for Endpoint for Linux is affected by 6 known vulnerabilities: 2 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122581 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-21537		 CWE-94 Medium
No
No
 - 10.02.2026 SB2026021090
#VU117083 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-59497		 CWE-367 Low
No
No
 - 14.10.2025 SB2025101484
#VU109248 - Improper Access Control
CVE-2025-47161		 CWE-284 Low
No
No
 101.25022.0002 16.05.2025 SB2025051608
#VU109121 - External Control of File Name or Path
CVE-2025-26684		 CWE-73 Low
No
No
 - 13.05.2025 SB20250513115
#VU98210 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-43614		 CWE-22 Low
No
No
 - 08.10.2024 SB2024100882
#VU65207 - Improper input validation
CVE-2022-33637		 CWE-20 Medium
No
No
 - 12.07.2022 SB2022071251