The vulnerability is an improper link resolution before file access in Microsoft Defender's Malware Protection Engine. It enables an authorized user to provide a crafted file path that the engine will follow and then access a file with elevated privileges, resulting in a local privilege‑escalation capability. The flaw is classified as CWE‑59, a path‑traversal or incorrect link resolution weakness.

Microsoft Malware Protection Engine is the affected product. No specific version information is supplied; the resolution applies to all deployments of the product for which the linked update has been released.

The CVSS score of 7.8 indicates high severity. The EPSS score is not available, so the current likelihood of exploitation is unknown. The vulnerability is listed in the CISA KEV catalog, indicating that exploitation has been observed or is anticipated. Considering the documented local trigger, an attacker would need local or administrative access to construct the malicious file link; however, any compromised account could potentially leverage the flaw to elevate privileges.