{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Microsoft Defender ist eine Software zur Erkennung von schädlicher Software (Malware).\r\nMicrosoft Configuration Manager, vormals bekannt als System Center Configuration Manager (SCCM), ist eine Software zur Systemverwaltung, die es Unternehmen ermöglicht, große Gruppen von Computern, Servern und Mobilgeräten zu verwalten, bereitzustellen und zu überwachen.\r\nWindows Defender ist in Windows integriert, um Ihren PC in Echtzeit vor Viren, Spyware und anderer Schadsoftware zu schützen.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Microsoft Defender, Microsoft Configuration Manager und Microsoft Windows Defender ausnutzen, um Administratorrechte zu erlangenoder vertrauliche Informationen offenzulegen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3919 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3919.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3919 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3919"
    }, {
      "category" : "external",
      "summary" : "Microsoft Leitfaden für Sicherheitsupdates",
      "url" : "https://msrc.microsoft.com/update-guide/"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-105726",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-102204",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-88075",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70049",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70264",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264"
    } ],
    "source_lang" : "en-US",
    "title" : "Microsoft SystemCenter (Defender und Configuration Manager): Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-13T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-14T12:09:46.073+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3919",
      "initial_release_date" : "2026-10-13T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-13T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "2503",
          "product" : {
            "name" : "Microsoft Configuration Manager 2503",
            "product_id" : "T048487",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:configuration_manager:2503"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Configuration Manager"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "for Endpoint for Windows",
          "product" : {
            "name" : "Microsoft Defender for Endpoint for Windows",
            "product_id" : "T022273",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:defender:for_endpoint_for_windows"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "for Endpoint for Linux",
          "product" : {
            "name" : "Microsoft Defender for Endpoint for Linux",
            "product_id" : "T050696",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:defender:for_endpoint_for_linux"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Defender"
      }, {
        "category" : "product_name",
        "name" : "Microsoft Windows Defender",
        "product" : {
          "name" : "Microsoft Windows Defender",
          "product_id" : "T024301",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:microsoft:windows_defender:credential_guard"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "Microsoft"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-102204",
    "product_status" : {
      "known_affected" : [ "T048487", "T050696", "T024301", "T022273" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-102204"
  }, {
    "cve" : "CVE-2026-105726",
    "product_status" : {
      "known_affected" : [ "T048487", "T050696", "T024301", "T022273" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-105726"
  }, {
    "cve" : "CVE-2026-70049",
    "product_status" : {
      "known_affected" : [ "T048487", "T050696", "T024301", "T022273" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-70049"
  }, {
    "cve" : "CVE-2026-70264",
    "product_status" : {
      "known_affected" : [ "T048487", "T050696", "T024301", "T022273" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-70264"
  }, {
    "cve" : "CVE-2026-88075",
    "product_status" : {
      "known_affected" : [ "T048487", "T050696", "T024301", "T022273" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-88075"
  } ]
}