CVE-2026-45498

Actively exploited

CISA lists CVE-2026-45498 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to Microsoft Defender.

• Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Public exploit: Not collected. Review the linked vendor advisory and apply the mitigation or fixed release for your affected product.

• Microsoft Security Response Center: Exploitation reported by Microsoft Security Response Center (2026-05-26)