CVE Tools

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

The Hacker NewsBy The Hacker News

PoC publicMicrosoft Defender

Our summary

A public proof of concept named BigDiskBuster can prevent Microsoft Defender from downloading platform and signature updates by exhausting free space on the C:\ drive. The tool has no assigned CVE and no Microsoft patch or advisory; it may leave Defender running with outdated detection content, although its claimed behavior has not been independently verified. It differs from the previously patched UnDefend issue, CVE-2026-45498, which Microsoft addressed in Antimalware Platform version 4.18.26040.7.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store