What is CVE-2026-50657?

CVE-2026-50657 is a medium-severity vulnerability in Microsoft Defender For Endpoint Mac, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 4.7/10. Published 2026-07-14.

How severe is CVE-2026-50657?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Microsoft Defender For Endpoint Mac

CVE-2026-50657

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Microsoft Defender For Endpoint Mac — versions 101.0.0

Weakness classification (CWE)

CWE-359 — Exposure of Private Personal Information to an Unauthorized Actor

References

secure@microsoft.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-50657?: CVE-2026-50657 is a medium-severity vulnerability in Microsoft Defender For Endpoint Mac, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 4.7/10. Published 2026-07-14.
How severe is CVE-2026-50657?: Medium severity. CVSS v3 base score is 4.7 out of 10.