What is CVE-2026-69414?
CVE-2026-69414 (ShieldBreak) is a critical zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, enabling a local low-privilege attacker to escalate to SYSTEM. A public PoC is available with no patch yet; CISA BOD 26-04 requires mitigation or configuration changes within 14 days.
Azərbaycanca: CVE-2026-69414 (ShieldBreak) Microsoft Malware Protection Engine-də aşkarlanmış kritik zero-day imtiyaz yüksəltmə zəifliyidir, yerli aşağı imtiyazlı hücumçuya SYSTEM səviyyəsinə yüksəlməyə imkan verir. Açıq PoC mövcuddur, lakin hələ yamaq yoxdur; CISA BOD 26-04-ə əsasən 14 gün ərzində konfiqurasiya dəyişikliyi və ya alternativ tədbirlər görmək tələb olunur.
Related CVEs
link basis: shared vendor: Microsoft
FAQ2
What privilege level can an attacker exploiting CVE-2026-69414 achieve?
A local low-privilege attacker can escalate to SYSTEM via CVE-2026-69414.
What measures does CISA BOD 26-04 require for CVE-2026-69414?
CISA BOD 26-04 requires configuration changes or alternative mitigations within 14 days, as no patch is available yet.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.