NCSC-2026-0425 Vulnerabilities fixed in Microsoft System Center

As cited

Copy frozen at 2026-10-13 20:38 UTC (site build).

vulnerabilities

NCSC-2026-0425 Vulnerabilities fixed in Microsoft System Center

Microsoft released fixes for three vulnerabilities in Configuration Manager, Defender for Endpoint, and Defender. A local attacker could exploit these flaws to gain elevated privileges or access sensitive data. The vulnerabilities have CVSS scores ranging from 5.50 to 8.80.

Why it matters: Organizations running Microsoft Configuration Manager, Defender for Endpoint, or Defender must prioritize patches for CVE-2026-88075 (CVSS 8.80), CVE-2026-102204 (CVSS 7.80), and CVE-2026-70264 (CVSS 5.50) to prevent local privilege escalation and data exposure.

Source published

2026-10-13 18:55 UTC

First seen by Cybersecurity Tracker

2026-10-13 19:54 UTC