Microsoft Defender For Identity — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Defender For Identity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-26685 — CVSS 6.5 (medium): Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.