CVE-2026-41091: Important (CVSS 7.8), Actively Exploited (CISA KEV)

Important (CVSS 7.8), Actively Exploited (CISA KEV), EPSS 8.4%.
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.