VulnerabilityBleeping Computer
7.0 — HIGH
Microsoft patches RoguePlanet Defender zero-day vulnerability
Microsoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A zero-day vulnerability in Microsoft Defender, tracked as CVE-2026-50656, was disclosed by a security researcher and subsequently patched by Microsoft. The 'RoguePlanet' flaw allows attackers to spawn a command prompt with SYSTEM privileges via a Microsoft Defender race condition.
⚙️Technical Details
💥Impact Assessment
Severity: high
Who Is at Risk
Users of fully patched Windows 10 and Windows 11 devices with Microsoft Malware Protection Engine installed.
🛡️Recommended Actions
1Ensure all systems are running the latest version of Microsoft Malware Protection Engine (1.1.26060.3008).
2Monitor system logs for suspicious activity related to Microsoft Defender.
3Implement additional security measures, such as behavioral monitoring and anomaly detection, to supplement Microsoft Defender.
📦Affected Products
Microsoft Malware Protection Engine
🔐NVD Verified DataVERIFIED
CVE-2026-50656 ↗CVSS 7 — HIGH
Attack Vector
LOCAL
Complexity
HIGH
Vector String
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-59
Affected Products (CPE)
Microsoft Malware Protection Engine
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.