Multiple vulnerabilities in Microsoft System Center

Description

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, gain privileges.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Defender for Identity can be exploited remotely to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Defender can be exploited remotely to gain privileges.

Original advisories

• CVE-2025-26685

• CVE-2025-26684

Related products

• Microsoft-Defender-for-Endpoint-for-Linux

CVE list

• CVE-2025-26684
  high
• CVE-2025-26685
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com