May 222026 Microsoft Warns of Two Actively Exploited Defender Vulnerabilities Active Defender exploits hit CVE-2026–41091 and CVE-2026–45498; June 3 fixes reduce SYSTEM and DoS risk.