CVE-2026

Api.Msrc.Microsoft • July 8, 2026

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Acknowledges RoguePlanet Zero-Day Vulnerability in Defender Microsoft has confirmed a critical zero-day vulnerability in Microsoft Defender, identified as CVE-2026-50656, which allows for local privilege escalation. The flaw, dubbed 'RoguePlanet,' was disclosed by security researcher Nightmare Eclipse and has a CVSS score of 7.8. It exploits a race condition in Defender, enabling attackers to gain system privileges without user interaction. Microsoft is actively working on a security patch to address this vulnerability. The vulnerability affects Windows 10 and Windows 11 systems with the June 2026 patches installed. A proof-of-concept exploit has been released, demonstrating the ease of exploitation. Microsoft has advised users to remain vigilant until a patch is available. 9 sources 72

Extracted Entities

CVE-2026

The full story

Extracted Entities

CWE Weaknesses (1)

MITRE ATT&CK (1)

Vulnerabilities (1)