CISA
CISA adds CVE-2026-45498 to KEV, urges Defender patch by June
The Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as an authoritative source for vulnerabilities that have been exploited in the wild, aiding organizations in managing and prioritizing vulnerabilities. The catalog offers formats such as CSV and JSON and advises users to follow vendor instructions for mitigations. An example is CVE-2026-45498, a Microsoft Defender vulnerability that allows denial of service and was noted on May 20, 2026, with a due date for action by June 3, 2026. The catalog emphasizes staying updated through subscriptions.
Story timeline CVE-2026-45498
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 20 May · 19:47 UTC | CISA | CISA Adds Microsoft Defender DoS Flaw CVE-2026-45498 to KEV List |
| Wed 20 May · 20:13 UTC | CISA | CISA adds CVE-2026-45498 to KEV, urges Defender patch by June (this article) |
| Thu 21 May · 10:21 UTC | SecurityWeek | Microsoft fixes two zero day Defender bugs under active attack |
| Thu 21 May · 18:41 UTC | Malwarebytes | Microsoft Defender vulnerabilities are being exploited in the wild |