BlueHammer & RedSun: Windows Defender CVE-2026-33825 Zero-day Vulnerability Explained

A series of zero-day exploits—including BlueHammer and RedSun—targeted critical race condition flaws in Microsoft Defender, enabling attackers to escalate privileges to SYSTEM level on fully patched Windows systems and exposing systemic weaknesses in Defender’s architecture before official patches were available.