Back Thehackernews

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Thehackernews •[email protected] (The Hacker News) • June 17, 2026

Learn how to uncover hidden AI use, see what data it can access, map every AI action to a human owner, and apply practical governance without heavy infrastructure changes.

Learn how to contain Mythos-style AI attacks with practical Zero Trust controls that reduce exposure, stop lateral movement, and limit risk.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Acknowledges RoguePlanet Zero-Day Vulnerability in Defender Microsoft has confirmed a critical zero-day vulnerability in Microsoft Defender, identified as CVE-2026-50656, which allows for local privilege escalation. The flaw, dubbed 'RoguePlanet,' was disclosed by security researcher Nightmare Eclipse and has a CVSS score of 7.8. It exploits a race condition in Defender, enabling attackers to gain system privileges without user interaction. Microsoft is actively working on a security patch to address this vulnerability. The vulnerability affects Windows 10 and Windows 11 systems with the June 2026 patches installed. A proof-of-concept exploit has been released, demonstrating the ease of exploitation. Microsoft has advised users to remain vigilant until a patch is available. 9 sources 72

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

The full story

Extracted Entities

Attack Types (1)

Vulnerabilities (1)