This vulnerability is a TOCTOU race condition in Microsoft Defender for Endpoint for Mac (version 101.0.0). It occurs when the software improperly handles timing between checking a condition and using the result, allowing a local attacker with some privileges to escalate their privileges. The CVSS v3.1 score is 5.5 (medium severity) with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but high integrity impact. Microsoft has published an official fix for this issue.

An authorized local attacker can exploit this race condition to elevate their privileges on the affected system. There is no impact on confidentiality or availability, but integrity of the system can be compromised due to unauthorized privilege escalation.

An official fix is available from Microsoft. Users and administrators should apply the patch provided by Microsoft for Microsoft Defender for Endpoint for Mac to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45647 for the update details and installation instructions.