{"id":"CVE-2026-50657","aliases":[],"cve":{"records":[{"id":"CVE-2026-50657","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-05T14:33:50.831Z","published":"2026-07-14T17:08:09.761Z","modified":"2026-11-10T22:38:39.046Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-10T22:38:39.046Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-07-15T13:59:51.561Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-359","description":"CWE-359: Exposure of Private Personal Information to an Unauthorized Actor","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:defender_for_endpoint:*:*:*:*:*:macos:*:*","versionStartIncluding":"101.0.0","versionEndExcluding":"101.26042.0020"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-07-15T13:59:35.041024Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.","score":4.7,"severity":"medium","published":"2026-07-14T17:08:09.761Z","modified":"2026-11-10T22:38:39.046Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft Defender for Endpoint for Mac","platforms":[],"versions":[{"version":"101.0.0","status":"affected","lessThan":"101.26042.0020","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-50657"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"],"sources":[{"name":"CVE","id":"CVE-2026-50657","modified":"2026-11-10T22:38:39.046Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-50657"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","score":4.7}],"sourceAffected":[],"observedAt":"2026-11-11T01:16:54.034Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T05:10:35.708Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-01T23:05:31.946Z","attemptedAt":"2026-11-01T23:05:31.946Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-01T23:05:31.946Z","attemptedAt":"2026-11-01T23:05:31.946Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-01T23:05:31.946Z","attemptedAt":"2026-11-01T23:05:31.946Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-01T23:05:32.463Z","attemptedAt":"2026-11-01T23:05:32.463Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-50657","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50657","modified":"2026-10-24T21:10:00.130","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-01T23:05:31.946Z"},{"source":"NVD","id":"CVE-2026-50657","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50657","modified":"2026-10-24T21:10:00.130","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-01T23:05:31.946Z"},{"source":"ENISA EUVD","id":"EUVD-2026-44120","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44120","modified":"Nov 1, 2026, 5:35:44 PM","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","checkedAt":"2026-11-01T23:05:31.946Z"},{"source":"GitHub Advisory Database","id":"GHSA-f9xj-xpm5-pgx4","url":"https://github.com/advisories/GHSA-f9xj-xpm5-pgx4","modified":"2026-07-14T18:32:29Z","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-01T23:05:31.946Z"},{"source":"FIRST EPSS","id":"CVE-2026-50657","url":"https://www.first.org/epss/","probability":0.004,"percentile":0.34279,"date":"2026-11-01","checkedAt":"2026-11-01T23:05:32.463Z"}],"aiSummary":{"text":"Microsoft Defender for Endpoint for Mac versions 101.0.0 to 101.26042.0020 are affected by an information disclosure vulnerability, allowing an authorized attacker to disclose information locally. The vulnerability exposes private personal information to an unauthorized actor. An attacker requires local access to exploit the weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:18:38.336Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-50657"}]}}