Back Securityaffairs.Co

Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development

Securityaffairs.Co •Pierluigi Paganini • June 18, 2026

Microsoft confirmed the RoguePlanet Defender zero-day (CVE-2026-50656), a privilege escalation flaw, and is developing a security patch. Microsoft has acknowledged the RoguePlanet zero-day affecting Microsoft Defender, tracked as CVE-2026-50656 (CVSS score of 7.8). The vulnerability allows privilege escalation through the Microsoft Malware Protection Engine. The company stated it is aware of the issue and is […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Acknowledges RoguePlanet Zero-Day Vulnerability in Defender Microsoft has confirmed a critical zero-day vulnerability in Microsoft Defender, identified as CVE-2026-50656, which allows for local privilege escalation. The flaw, dubbed 'RoguePlanet,' was disclosed by security researcher Nightmare Eclipse and has a CVSS score of 7.8. It exploits a race condition in Defender, enabling attackers to gain system privileges without user interaction. Microsoft is actively working on a security patch to address this vulnerability. The vulnerability affects Windows 10 and Windows 11 systems with the June 2026 patches installed. A proof-of-concept exploit has been released, demonstrating the ease of exploitation. Microsoft has advised users to remain vigilant until a patch is available. 9 sources 72

Extracted Entities

Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Vulnerabilities (1)