CVE-2026-45498

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jul 23, 2026

Description

Microsoft Defender Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
May 20, 2026
Last modified
Jul 23, 2026
Added to CISA KEV
May 20, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-454998.8Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.CVE-2026-45504.7A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.pCVE-2026-455006.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attCVE-2026-455016.1Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.CVE-2026-455025.0Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-455036.5Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-455048.8Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-455058.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMCVE-2026-45518.8A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSafeClientFilter of the file /goform/SafeClientCVE-2026-455157.8In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overfCVE-2026-455193.3In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This coCVE-2026-45528.8A vulnerability was determined in Tenda F453 1.0.0.3. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the c
CVE-2026-45498: High severity, CVSS 7.5 | Vulnix