Exploited flaws in two Defender-related components could let an attacker climb to SYSTEM or knock protection offline, underscoring how endpoint security software can become part of the attack surface.