Microsoft Defender contains an insufficient granularity of access control vulnerability identified as CVE-2026-33825. This security flaw could allow an authorized attacker to escalate privileges locally on affected systems. The vulnerability affects Microsoft's endpoint protection solution and has been assigned a high criticality rating. Official advisories and vulnerability details are available through CISA's National Vulnerability Database and Microsoft Security Response Center. Organizations using Microsoft Defender should prioritize patching and review their current security configurations.