GCVE-110-NCSC-2026-236

Advisory PublishedCVSS 7.8/10

Vulnetix · Advisory published July 14, 2026

An integer underflow vulnerability in Microsoft Defender enables unauthorized local code execution due to wraparound behavior.

Download JSON Open in Console

Weaknesses (CWE)

CWE-191Integer Underflow (Wrap or Wraparound)CWE-122Heap-based Buffer OverflowCWE-359Exposure of Private Personal Information to an Unauthorized ActorCWE-367Time-of-check Time-of-use (TOCTOU) Race Condition

Risk Scores

CVSS 3.1

7.8/10

High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2026-50657 CVE-2026-50658 CVE-2026-55011 CVE-2026-55012 CVE-2026-56178

References

advisory

Browse GCVE Records

67,521 records in the GCVE database · Updated August 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON