Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

Security researcher Chaotic Eclipse has released a proof-of-concept (PoC) exploit demonstrating a patch bypass for CVE-2026-69414, a vulnerability in Microsoft Defender previously known as ShieldBreak. The newly disclosed bypass, dubbed ShieldCrash, allows arbitrary file read with SYSTEM privileges on all supported versions of Windows despite Microsoft's patch in Malware Protection Engine version 1.1.26080.3. The researcher claims Microsoft failed to fully address the original vulnerability, leaving a code path still exploitable under specific conditions.

AI-extracted · verify before operational use