CVE-2026-54123Important
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Assessment
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
- Severity
- Important
- CVSS base score
- 5.5CVSS:3.1/
AV:L/ AC:L/ PR:L/ UI:N/ S:U/ C:H/ I:N/ A:N/ E:U/ RL:O/ RC:C - Impact
- Information Disclosure
- EPSS, next 30 days
- 0.5%Higher than 38.8% of scored CVEs · FIRST model run 26 Sep 2026 · about EPSS
- Exploitability
- Exploitation Less Likely
- Publicly disclosed
- No
- Customer action
- Required: apply the update
- Component
- Microsoft Defender for Endpoint
- Weakness
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- Issued by
- Microsoft
- Published
- 11 Aug 2026 · August 2026
- Last revised
- 11 Aug 2026
Updates that fix it
0 KBsNo KB listed
MSRC lists no downloadable update, which usually means a service-side fix or a release-notes update. Check the MSRC advisory.
Affected products
System Center1 affected product
- Microsoft Defender for Endpoint for Mac