RoguePlanet

Microsoft has patched the RoguePlanet zero-day vulnerability (CVE-2026-50656) in Microsoft Defender, an elevation of privilege flaw that could allow attackers to gain system-level access. The fix is included in the updated Malware Protection Engine version 1.1.26060.3008, which automatically updates for most users. Systems with other antivirus software like Malwarebytes are not affected if Defender is disabled.

Microsoft has released a security patch to address a Defender zero-day vulnerability known as 'RoguePlanet,' which was disclosed after the June 2026 Patch Tuesday.

Microsoft confirmed it is working on a security patch for a Defender zero-day vulnerability named 'RoguePlanet,' which was disclosed one week ago. The vulnerability is being actively addressed by the company.

Nightmare Eclipse, a bug hunter with a reported grudge against Microsoft, disclosed a new zero-day vulnerability called RoguePlanet targeting Microsoft Defender on Windows 10 and 11. The flaw allows local privilege escalation to SYSTEM-level access and is part of seven zero-days the researcher has publicly released, accusing Microsoft of ignoring vulnerability reports and refusing communication. Microsoft initially responded with potential legal threats but later clarified it had 'no intention to pursue action' against security researchers.

A security researcher named Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept exploit for a Microsoft Defender zero-day vulnerability called RoguePlanet, which grants SYSTEM access on updated Windows systems. The exploit, a race condition with a reported 100% success rate, was published under the GitHub account MSNightmare.

Microsoft Defender has a zero-day vulnerability named 'RoguePlanet' that allows attackers to gain SYSTEM privileges. The exploit highlights a critical security flaw in the software.