# Microsoft Defender for Endpoint for Linux.

Every CVE that names Microsoft Defender for Endpoint for Linux among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21537.md)
  `CVE-2026-21537` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Code injection
- [Microsoft Defender for Linux Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59497.md)
  `CVE-2025-59497` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Race condition
- [Microsoft Defender for Endpoint Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47161.md)
  `CVE-2025-47161` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 7.8 High · Not analysed yet · Published 15 May 2025 · Tags: Broken access control
- [Microsoft Defender Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26684.md)
  `CVE-2025-26684` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 6.7 Medium · Not analysed yet · Published 13 May 2025 · Tags: Path traversal
- [Microsoft Defender for Endpoint for Linux Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43614.md)
  `CVE-2024-43614` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Path traversal
- [Microsoft Defender for Endpoint Tampering Vulnerability](https://agentprime.io/advisories/CVE-2022-33637.md)
  `CVE-2022-33637` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2022
- [Microsoft Defender for Endpoint Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2022-23278.md)
  `CVE-2022-23278` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Mar 2022

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-defender-for-endpoint-for-linux>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-defender-for-endpoint-for-linux/>. Everything for agents: <https://agentprime.io/llms.txt>.