VULNERABILITY INTELLIGENCE

CVE-2025-26678

CVSS score8.4 HIGH

EPSS probability0.54%

CISA KEVNot currently listed

Published2025-04-08

Last modified2026-06-17

Description

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.