[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5o_1EfiJuhAv_e-yfuFMfL7gHiamPt8zd-hBCJl_Elo":3,"g5a-risk:CVE-2026-41091":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":53,"weaknesses":54,"weaknessesCount":40,"isActivelyExploited":4,"cisaInfo":63,"otxData":25,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":101,"notableEvents":102},"CVE-2026-41091","What is CVE-2026-41091?","Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.","2026-05-20T13:16:29.173","2026-07-24T10:10:00.197",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[],[],[],0.00443,[31,31,31,31,31,31,31],"High",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"microsoft","malware_protection_engine","*","cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",1,[42,47],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-41091","Microsoft",[46],"Vendor Advisory",{"url":48,"source":49,"tags":50},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41091","CISA",[51,52],"Third Party Advisory","US Government Resource",2,[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",{"shortDescription":59,"requiredAction":59,"vulnerabilityName":59,"dateAdded":25},[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2026-41091? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-41091, a high severity cyber security vulnerability from 2026. Improper link resolution before file access ('link followin...","CVE-2026-41091, CVE-2026-41091 vulnerability, CVE-2026-41091 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, microsoft security, malware_protection_engine vulnerability","\u002Fwhat-is\u002Fcve-2026-41091",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":9,"dateModified":10,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-41091","Cybersecurity","CVE-2026-41091, CVE-2026-41091 vulnerability, CVE-2026-41091 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":25,"Negate":25,"Nodes":92},[93],{"Operator":94,"Negate":95,"CPEMatch":96},"OR",false,[97],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":98,"VersionStartExcluding":25,"VersionStartIncluding":99,"VersionEndExcluding":100,"VersionEndIncluding":25},"AD1882FA-1447-46F7-A592-142F55820A60","1.1.26030.3008","1.1.26040.8",[],[103,110],{"id":104,"eventType":105,"eventTime":106,"details":107,"label":108,"color":109},"2bfb680e-d51d-48b2-aa06-491a48764c81","NEW_CISA","2026-05-22T08:54:31.794872+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"9f206841-1a1c-42b2-9441-c185bcdcc5fd","NEW_NVD","2026-05-22T08:55:13.189706+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":10,"cacheTime":118,"version":119},1792373757473,"2.0",{"score":121,"band":33,"action":122,"scoredAt":123},74,"Emergency patch","2026-10-16T07:13:36.248715+00:00"]