CVE Tools

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

The Hacker NewsBy The Hacker News

PatchMicrosoft Malware Protection Engine

Our summary

Microsoft has issued a security update for a critical privilege escalation flaw in the Microsoft Malware Protection Engine, known as RoguePlanet (CVE-2026-50656). The vulnerability allows attackers to gain SYSTEM-level privileges through a race condition in 'mpengine.dll'. It affects the core component responsible for malware scanning and detection. The fix is included in version 1.1.26060.3008 of the engine. While no active exploitation has been reported, the flaw could enable arbitrary code execution or unauthorized system access.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store