CVE-2026-50657

MEDIUM

Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-50657. PoCs published by NeseOS-Corp.

AI-analyzed exploit summary The repository contains only a README.md and LICENSE file with no actual exploit code, technical details, or proof-of-concept implementation. It lists affected software versions and patch dates but provides no vulnerability analysis or functional exploit.

Description

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

Exploits (1)

github STUB
by NeseOS-Corp · poc
https://github.com/NeseOS-Corp/CVE-2026-50657

The repository contains only a README.md and LICENSE file with no actual exploit code, technical details, or proof-of-concept implementation. It lists affected software versions and patch dates but provides no vulnerability analysis or functional exploit.

Classification
Stub 95%
Attack Type
Other
Complexity
Unknown
Reliability
Unknown
Target: Nese Vista, Nese Server 2008, Nese 7 SP2, Nese Server 2008 R2 SP1, Nese Storage Server 2012, Nese 9, Nese Server 2012 R2, Nese 10, Nese 11 (BETA)
No auth needed
mistral-large-3 · analyzed Jul 15, 2026 Full analysis →

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657

Scores

CVSS v3 4.7
EPSS 0.0044
EPSS Percentile 35.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-359
Status published
Products (2)
microsoft/defender_for_endpoint 101.0.0 - 101.26042.0020
Microsoft/Microsoft Defender for Endpoint for Mac 101.0.0 - 101.26042.0020
Published Jul 14, 2026
Tracked Since Jul 14, 2026