Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability
Published April 8, 2025