Microsoft Releases Patches for RoguePlanet Defender Zero-Day Vulnerability

Microsoft has released security updates to address a newly disclosed zero-day vulnerability in Microsoft Defender, publicly referred to as “RoguePlanet.” The flaw, tracked as CVE-2026-50656, affects the Microsoft Malware Protection Engine and could allow attackers to gain elevated privileges on vulnerable systems. The vulnerability is classified as an elevation-of-privilege issue. It carries a CVSS score of 7.8, indicating a high level of severity. According to Microsoft, the flaw stems from improper link resolution before file access and is mapped to CWE-59. Attackers with low privileges can exploit this weakness to execute malicious actions with higher system-level permissions, potentially compromising confidentiality,...

Læs hele artiklen hos kilden.