CVE-2026-41410

CVEs › CVE-2026-41410

Description

Rejected reason: REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-40520. Reason: This candidate is a duplicate of CVE-2026-40520. Notes: All CVE users should reference CVE-2026-40520 instead of this candidate.

Overview

State: REJECTED
Assigner (CNA): GitHub_M
CVSS severity: null
CVSS score: 9.8 / 10
CVSS vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Effective score: 9.8 / 10 NULL source: CNA overview
CWE(s): —
Reserved: 2026-04-20
Published: —
Last updated: 2026-05-13 20:40 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41410.json
Linked Threat: CVE-2026-41410 — CVE-2026-41410

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-13 19:17:22 UTC
NVD last modified: 2026-05-13 19:17:22 UTC

NVD / KEV / EPSS data refreshed 2026-05-25 09:50 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (2)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://nvd.nist.gov/vuln/detail/CVE-2026-41410 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-41410 tenable:www.cve.org

Remediations (16)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Mitigate RedSun Zero-Day Without A Patch | Qualys

web:blog.qualys.com

Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

2026-05-23 20:22 UTC
Microsoft Defender mistakenly flags trusted DigiCert certificates as ...

web:piunikaweb.com

Microsoft Defender security intelligence update (version 1.449.424.0) mistakenly targets two trusted DigiCert root CA files.

2026-05-23 20:22 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-23 20:22 UTC
Microsoft Issues Second Biggest Patch Tuesday Ever in April

web:redmondmag.com

Microsoft April 2026 Patch Tuesday fixed 163 CVEs , marking its second-largest security update. Three zero-day vulnerabilities impacted SharePoint, Chromium-based Edge workflows and Microsoft Defender.

2026-05-23 20:22 UTC
Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find

web:www.cvefind.com

CVE Find is a real-time vulnerability database indexing 351 731 security flaws ( CVE ) from MITRE, NVD, CISA KEV, CWE and CAPEC. 1311 new CVEs were published in the last 7 days. Data aggregated from: MITRE Corporation ( CVE , CWE, CAPEC), National Vulnerability Database - NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).

2026-05-23 20:22 UTC
2 New Microsoft Defender Zero-Days Exploited—Patch Now ... - Forbes

web:www.forbes.com

Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.

2026-05-23 20:22 UTC
Microsoft's February 2026 Patch Tuesday: Six Zero-Days, 58 flaws ...

web:www.secpod.com

The second Tuesday of the month has arrived, bringing another significant wave of Microsoft security updates. In February 2026 , Microsoft issued patches for 58 vulnerabilities, including six actively exploited zero-day flaws and five rated Critical. As part of this month's release, Microsoft has also begun rolling out updated Secure Boot certificates ahead of the June 2026 expiration of the ...

2026-05-23 20:22 UTC
Microsoft confirms two major Defender security issues — so update now ...

web:www.techradar.com

CISA confirms two bugs being actively exploited in the wild, as Microsoft releases patches.

2026-05-23 20:22 UTC
Mitigating CVE-2024-21410 Exploits: Exchange Server Extended ... - Vicarius

web:www.vicarius.io

In conclusion, the mitigation of CVE -2024-21410 underscores the critical importance of timely system updates and the adoption of robust security measures. By implementing Exchange Server Extended Protection, organizations can bolster their defenses against evolving cyber threats, safeguarding sensitive data and infrastructure from exploitation.

2026-05-23 20:22 UTC
Patch Tuesday May 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-05-23 20:22 UTC
CISA Warns of Exploited Microsoft Defender 0-Day Flaws

web:cyberpress.org

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026 .

2026-05-26 02:52 UTC
Microsoft Patch Tuesday, April 2026 Security Update Review

web:threatprotect.qualys.com

With Qualys Policy Audit's out-of-the-box mitigation or Compensatory Controls, which reduce the risk of a vulnerability being exploited because the remediation ( fix / patch ) cannot be done immediately, these security controls are not recommended by any industry standards, such as CIS and DISA-STIG.

2026-05-26 02:52 UTC
138 CVEs Fixed: Netlogon RCE Leads Microsoft's Patch Pack - DNS Bug ...

web:vulert.com

Microsoft's May 2026 Patch Tuesday fixes 138 vulnerabilities, including critical Windows DNS and Netlogon RCE flaws. Learn the risks, key CVEs , mitigation steps, and how Vulert can help.

2026-05-26 02:52 UTC
Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days

web:www.bleepingcomputer.com

Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities.

2026-05-26 02:52 UTC
April 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft's April 2026 Patch Tuesday addresses 164 CVEs , featuring 8 Critical vulnerabilities, one exploited zero-day, and one disclosed zero-day.

2026-05-26 02:52 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-26 02:52 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-41410.json.

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:40:25.325Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-40520. Reason: This candidate is a duplicate of CVE-2026-40520. Notes: All CVE users should reference CVE-2026-40520 instead of this candidate."
        }
      ],
      "replacedBy": [
        "CVE-2026-40520"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41410",
    "dateRejected": "2026-05-13T18:40:25.325Z",
    "dateReserved": "2026-04-20T15:32:33.812Z",
    "dateUpdated": "2026-05-13T18:40:25.325Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}