CVE-2026-45498

Affected products and versions

1 source assertion

{"product":"Microsoft Defender Antimalware Platform","vendor":"Microsoft","versions":[{"lessThan":"4.18.26040.7","status":"affected","version":"4.0.0.0","versionType":"custom"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:56b38e627fc52af2d7e476d020ae428f0d826132840ed28897d59344b000a03e · sha256:0f0f7548808c9df9… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":4,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:56b38e627fc52af2d7e476d020ae428f0d826132840ed28897d59344b000a03e · sha256:0f0f7548808c9df9… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en-US","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:56b38e627fc52af2d7e476d020ae428f0d826132840ed28897d59344b000a03e · sha256:0f0f7548808c9df9… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions

{"cwes":[],"dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomwareCampaignUse":"Unknown","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498 ; https://nvd.nist.gov/vuln/detail/CVE-2026-45498","product":"Defender","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.","vendorProject":"Microsoft","vulnerabilityName":…

cisa_kev_jsonknown_exploited
urn:baitaphish:normalized-source-record:v2:6d58333ca37b2aeeae5fd798789d70b0dbc0526bf9756176004d0a6f5244c235 · sha256:16acee8334e59e44… · /vulnerabilities/64
Open source location →

{"cwes":[],"dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomwareCampaignUse":"Unknown","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498 ; https://nvd.nist.gov/vuln/detail/CVE-2026-45498","product":"Defender","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.","vendorProject":"Microsoft","vulnerabilityName":…

cisa_kev_jsonknown_exploited
urn:baitaphish:normalized-source-record:v2:29d7d521d13ea84b01722951d68b32c57aa05701a98d65a6d99262cfbb904527 · sha256:635dff916c4092c0… · /vulnerabilities/67
Open source location →

Source references

2 source assertions

{"name":"Microsoft Defender Denial of Service Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:56b38e627fc52af2d7e476d020ae428f0d826132840ed28897d59344b000a03e · sha256:0f0f7548808c9df9… · /containers/cna/references/0

{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45498"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:56b38e627fc52af2d7e476d020ae428f0d826132840ed28897d59344b000a03e · sha256:0f0f7548808c9df9… · /containers/adp/0/references/0

Attribution and limitations

CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.