Page generated: 11 Nov 2026, 12:41 UTC
← Dashboard

CVE-2026-45498

RedSun

Microsoft Defender Denial of Service Vulnerability

CVSS 4.0 (MEDIUM) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
3.5/10
REALITY · THREAT PRIORITY
7.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 4: +0.60
  • Fresh EPSS: 63.08%: +0.32

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 44 documents and public datasets.

Hype components

Headline sample (25%)
70/100
Press, 30 days (60%)
5/100
Grounded branding (15%)
100/100
HYPE TOTAL36/100

Sources and documents

Global Agriculture
Press · 02 Nov 2026, 13:24 · Red Sun Debuts Two Microbial Pesticides at China’s ACE2026 - Global Agriculture
The Hacker News
Press · 22 Sep 2026, 07:00 · Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates - The Hacker News
TradingView
Press · 04 Sep 2026, 07:00 · Redsun Properties Logs August Contracted Sales RMB 110 Million - TradingView
Barracuda Blog
Press · 03 Sep 2026, 07:00 · Nightmare-Eclipse: six zero-days, six weeks and one big grudge - Barracuda Blog
NASA Science (.gov)
Press · 30 Jul 2026, 07:00 · APOD: 2026 July 30 - Red Sun through Wildfire Smoke - NASA Science (.gov)
See all 44 source documents
WLUK
Press · 15 Jul 2026, 07:00 · PHOTOS | Smoky skies create a red sun over Northeast Wisconsin - WLUK
The Hacker News
Press · 09 Jul 2026, 07:00 · Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges - The Hacker News
BleepingComputer
Press · 01 Jun 2026, 07:00 · Critical Windows Netlogon RCE flaw now exploited in attacks - BleepingComputer
Infosecurity Magazine
Press · 28 May 2026, 07:00 · Microsoft Condemns "Uncoordinated" Zero Day Disclosures - Infosecurity Magazine
CyberSecurityNews
Press · 28 May 2026, 07:00 · Microsoft Warns Public Release of Zero-Day Details Before Vendor Coordination - CyberSecurityNews
The Hacker News
Press · 28 May 2026, 07:00 · Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal - The Hacker News
Check Point Research
Press · 25 May 2026, 07:00 · 25th May – Threat Intelligence Report - Check Point Research
Cyber Daily
Press · 22 May 2026, 07:00 · Microsoft patches pair of Microsoft Defender zero-days following active exploitation - Cyber Daily
CyberSecurityNews
Press · 22 May 2026, 07:00 · CISA Warns of Microsoft Defender 0-Day Vulnerabilities Exploited in Attacks - CyberSecurityNews
CXO Digitalpulse
Press · 22 May 2026, 07:00 · Microsoft Warns About Two Actively Exploited Defender Vulnerabilities - CXO Digitalpulse
Notebookcheck
Press · 22 May 2026, 07:00 · Microsoft patches Defender zero-days exploited in live attacks - Notebookcheck
Rescana
Press · 21 May 2026, 07:00 · Microsoft Defender Zero-Day Vulnerabilities RedSun and UnDefend Actively Exploited on Windows 10, 11, and Server (April 2026 CVE Analysis) - Rescana
CyberSecurityNews
Press · 21 May 2026, 07:00 · New Microsoft Defender 0‑Days Actively Exploited in the Wild - CyberSecurityNews
GBHackers News
Press · 21 May 2026, 07:00 · Microsoft Defender Zero-Day Vulnerabilities Actively Exploited in the Wild - GBHackers News
CSO Online
Press · 21 May 2026, 07:00 · Microsoft patches two zero-day flaws in Defender - CSO Online
SecurityWeek
Press · 21 May 2026, 07:00 · Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days - SecurityWeek
Tech Times
Press · 21 May 2026, 07:00 · Microsoft Defender Zero-Days Patched: RedSun, UnDefend Exploits Already Used in Live Intrusions - Tech Times
Help Net Security
Press · 21 May 2026, 07:00 · Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498) - Help Net Security
BleepingComputer
Press · 21 May 2026, 07:00 · Microsoft warns of new Defender zero-days exploited in attacks - BleepingComputer
Forbes
Press · 21 May 2026, 07:00 · 2 New Microsoft Defender Zero-Days Exploited—Patch Now Rolling Out - Forbes
The Hacker News
Press · 21 May 2026, 07:00 · Microsoft Warns of Two Actively Exploited Defender Vulnerabilities - The Hacker News
Dark Reading
Press · 21 Apr 2026, 07:00 · Exploits Turn Windows Defender Into Attacker Tool - Dark Reading
BornCity
Press · 17 Apr 2026, 07:00 · Windows Defender 0-days: BlueHammer (patched) and RedSun (unpatched)Born's Tech and Windows World - BornCity
TechRadar
Press · 17 Apr 2026, 07:00 · Disgruntled researcher releases second major Windows Defender zero-day - TechRadar
CyberSecurityNews
Press · 17 Apr 2026, 07:00 · Microsoft Defender 0-Day Vulnerability “RedSun” Enables Full SYSTEM Access - CyberSecurityNews
CloudSEK
Press · 17 Apr 2026, 07:00 · RedSun: Windows 0day when Defender becomes the attacker - CloudSEK
The Hacker News
Press · 17 Apr 2026, 07:00 · Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched - The Hacker News
Cybernews
Press · 17 Apr 2026, 07:00 · Angry researcher drops second Windows Defender zero-day exploit: “They mopped the floor with me” - Cybernews
Help Net Security
Press · 17 Apr 2026, 07:00 · Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild - Help Net Security
PCWorld
Press · 16 Apr 2026, 07:00 · Unpatched Microsoft Defender flaw lets hackers gain admin access - PCWorld
BleepingComputer
Press · 16 Apr 2026, 07:00 · New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges - BleepingComputer
Produce Grower -
Press · 13 Feb 2026, 08:00 · Red Sun Farms, Heritable Agriculture and CIV partner on indoor strawberry innovation - Produce Grower -
The National WWII Museum | New Orleans
Press · 10 Feb 2026, 04:29 · Under the Blood-Red Sun: Understanding the Attack on Pearl Harbor Through Historical Fiction - The National WWII Museum | New Orleans
Comic Book Resources
Press · 03 Jan 2026, 08:00 · The Red Sun's Effects on Supergirl, Explained - Comic Book Resources
The Packer
Press · 02 Dec 2025, 08:00 · Red Sun Farms, Heritable Agriculture, CIV Partner to Drive Indoor Strawberry Innovation - The Packer
The Cornell Daily Sun
Press · 14 Nov 2025, 08:00 · PETROVA | The Red Sun Rises: How Democratic Socialism Swept the Vote - The Cornell Daily Sun
South China Morning Post
Press · 24 Oct 2025, 07:00 · Chinese developer’s property management arm hit by share seizure in Hong Kong - South China Morning Post
The Progressive Subway -
Press · 28 Mar 2025, 07:00 · Review: Sykofant – Red Sun - The Progressive Subway -
The Packer
Press · 27 Mar 2025, 07:00 · Red Sun Farms taps Paul J. Mastronardi for business development post - The Packer

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

024681002 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 0.0Reality 7.902 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 3.8Reality 7.902 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 3.5Reality 7.9Nov 2Nov 2Nov 2

━ Hype Score (Perceived)  ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 4; EPSS 63.1%
Attention, last 30 days
1 distinct story titles; 1 press documents; 1 publisher domains.
Technical potential
local access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:11.172054+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
27 Mar 2025, 07:00
Added to the CISA KEV catalog
20 May 2026, 00:00
Published
20 May 2026, 13:09
Latest press mention
02 Nov 2026, 13:24
Score calculated
05 Nov 2026, 14:00
Name
RedSun