Multiple vulnerabilities in Microsoft System Center

Description

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, gain privileges.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Defender for Identity can be exploited remotely to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Defender can be exploited remotely to gain privileges.

Original advisories

• CVE-2025-26685

• CVE-2025-26684

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Defender-for-Endpoint-for-Linux

CVE list

• CVE-2025-26684
  high
• CVE-2025-26685
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com