Defender Zero-Days Force Emergency Patching Across Windows Enterprises

Microsoft has disclosed two critical Defender vulnerabilities actively exploited in real-world attacks, now formally listed in CISA's Known Exploited Vulnerabilities catalog. The first enables privilege escalation to SYSTEM level from any authenticated user; the second crashes Defender entirely, leaving endpoints defenseless against follow-on payloads. For organizations relying on Defender for endpoint protection, this is a same-week patching mandate—delaying for routine maintenance windows risks immediate compromise.