CVE Tools

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability

SecurityWeekBy Eduard Kovacs

PatchMicrosoft Defender

Our summary

Microsoft has issued patches for a vulnerability in Microsoft Defender, known as RoguePlanet, identified as CVE-2026-50656. The flaw allows attackers to escalate privileges due to a race condition. A proof-of-concept exploit was published by researcher Nightmare Eclipse on June 9, though it had limited reliability at the time. Microsoft addressed the issue through an automatic update to the Microsoft Malware Protection Engine, requiring no manual action from users. While there are currently no reports of exploitation, previous vulnerabilities from the same researcher have been used in attacks.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store