$ cve CVE-2026-45498 JSON

CVE-2026-45498 KEV

4.0

MEDIUM · CVSS 3.1 · EPSS 1.3% (pctl 69)

Patch first

On CISA KEV — known exploited in the wild, due 2026-06-03.

Microsoft Defender Denial of Service Vulnerability

CVSS	4.0 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS	1.27% — more likely to be exploited than 69% of all CVEs
Weakness	CWE-400
On CISA KEV	yes — remediate by 2026-06-03
Public exploit	none known
Published	2026-05-20
Last modified	2026-07-23

Name	Microsoft Defender Denial of Service Vulnerability
Added	2026-05-20
Due	2026-06-03
Vendor / product	Microsoft / Defender
Ransomware use	none reported

Vendor	Product
microsoft	defender antimalware platform