Microsoft Defender zero-days under active exploit

Microsoft says Defender flaws CVE-2026-41091 and CVE-2026-45498 are being exploited, risking SYSTEM privilege escalation or disrupted protection. Keep Defender platform updates enabled and confirm patched versions are applied.