sign in--:--:--UTC

CVE-2026-41091

exploited in the wild

CVSS

7.8

Reports

16

First seen

May 20

Last seen

Jun 17

Affected product

Microsoft Defender

Associated actors

Qilin ×2 RondoDox ×2 ShinyHunters ×2 Nightmare Eclipse ×1 Nimbus Manticore ×1 Outsider ×1 Phorpiex ×1 Russia-linked groups ×1 Safepay ×1 Silver Fox ×1 TeamPCP ×1 Akira ×1 UNG0002 ×1 Eagle Werewolf ×1 Fox Tempest ×1

Recent reports

Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development

The Hacker NewsJun 17 Critical

Check Point Threat Intelligence Report – 15 June 2026

Check Point ResearchJun 15 High

June Patch Tuesday: 209 Microsoft CVEs surpass 500-CVE monthly threshold

Sophos NewsJun 11 Critical

Microsoft ships largest Patch Tuesday on record with one vulnerability under active attack

The Record (Recorded Future News)Jun 10 High

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The Hacker NewsJun 10 High

Microsoft breaks Patch Tuesday record with 206 vulnerabilities

CyberScoopJun 9 Critical

Critical Windows Netlogon RCE Flaw Actively Exploited in Attacks

Bleeping ComputerJun 1 High

Microsoft Condemns Uncoordinated Zero-Day Disclosures; Researcher's GitHub Account Removed

The Hacker NewsMay 28 High

Check Point Threat Intelligence Report – 25 May 2026

Check Point ResearchMay 25 Critical

Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 25 High

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

The Hacker NewsMay 21 High

Microsoft Defender zero-day vulnerabilities exploited in active attacks

Bleeping ComputerMay 21 High

Microsoft Defender Multiple Vulnerabilities

HKCERTMay 21 Critical

Microsoft Security Advisory AV26-489: Critical Vulnerabilities in Azure, Bitlocker, and Defender

Canadian Centre AlertsMay 20 High

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesMay 20 Critical

Multiple Vulnerabilities in Microsoft Products (A26-05-33)

GovCERT.HKMay 20

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans