CyberSIXT Search
Original

CISA

CISA adds Microsoft Defender flaw CVE-2026-33825 to KEV list

Part of the CVE-2026-33825 story · 17 articles · 9 outlets · since 14 Apr

According to CISA, the Known Exploited Vulnerabilities Catalog lists CVE-2026-33825 as a Microsoft Defender vulnerability described as having insufficient granularity of access control that could allow an authorised attacker to escalate privileges locally. The entry notes that it is Microsoft Defender, with the associated CWE-1220, and that it is unknown whether it has been used in ransomware campaigns. Date Added is 22 April 2026 and the Due Date is 6 May 2026.

Action recommended includes applying mitigations per vendor instructions, following the BOD 22-01 guidance for cloud services, or discontinuing use of the product if mitigations are unavailable. This KEV entry points to Microsoft’s update guide and NVD for further details.

Story timeline CVE-2026-33825

Full timeline
Show as table
CVE-2026-33825 coverage
Published (UTC)OutletHeadline
Tue 14 Apr · 18:31 UTCSANS ISCMicrosoft Patch Tuesday April 2026., (Tue, Apr 14th)
Tue 14 Apr · 18:32 UTCSecurityWeekMicrosoft patches SharePoint zero day CVE-2026-32201 in the wild
Tue 14 Apr · 22:00 UTCDark ReadingPrivilege Elevation Dominates Massive Microsoft Patch Update
Tue 14 Apr · 22:32 UTCRapid7Microsoft patches 167 flaws, including exploited SharePoint bug
Wed 15 Apr · 06:42 UTCSecurity AffairsMicrosoft fixes SharePoint zero day CVE-2026-32201 in April
Wed 15 Apr · 09:57 UTCInfosecurityMicrosoft Fixes Two Zero-Days in April Patch Tuesday
Wed 15 Apr · 10:54 UTCMalwarebytesApril Patch Tuesday patches two Microsoft zero day flaws
Sun 19 Apr · 18:13 UTCSecurity AffairsMicrosoft Defender under attack as three zero-days, two of them still unpatched, enable elevated access
Tue 21 Apr · 20:01 UTCDark ReadingExploits Turn Windows Defender into Attacker Tool
Wed 22 Apr · 22:11 UTCCISACISA adds Microsoft Defender flaw CVE-2026-33825 to KEV list
Wed 22 Apr · 23:03 UTCCISACISA adds Microsoft Defender flaw CVE-2026-33825 to KEV list (this article)
Thu 23 Apr · 08:31 UTCSecurityWeekRecent Microsoft Defender Vulnerability Exploited as Zero-Day
Thu 23 Apr · 10:30 UTCSecurity AffairsCISA urges patch Microsoft Defender flaw CVE-2026-33825 by May 6
Fri 15 May · 07:21 UTCSecurity AffairsWindows Zero Days YellowKey & GreenPlasma Expose BitLocker Bypass
Tue 19 May · 22:01 UTCDark ReadingWindows Zero-Day Barrage Continues After Patch Tuesday
Tue 30 Jun · 14:20 UTCSecurityWeekBlueHammer Defender Flaw Linked to Ransomware Exploits
Wed 1 Jul · 12:26 UTCSecurity AffairsCISA warns BlueHammer flaw now used in ransomware attacks

Sources

Original articlecisa.gov

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device