PoC Exploit Released for Microsoft Defender 0-Day Vulnerability

A publicly released proof-of-concept exploit (RedSun) for a critical Microsoft Defender vulnerability (CVE-2026-33825) was published by researcher Chaotic Eclipse, with source code on GitHub. The flaw enables local privilege escalation in Defender's real-time protection and may be adapted to achieve remote code execution in some configurations; the report urges immediate patching and restriction of Defender administrative privileges while noting tensions between the researcher and Microsoft.