hacker-news · Crawled Jul 9, 2026

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Read original article ↗

AI Summary

Microsoft has patched a privilege escalation vulnerability in the Microsoft Malware Protection Engine, dubbed RoguePlanet and tracked as CVE-2026-50656, which could allow attackers to gain SYSTEM-level privileges. The flaw stems from a race condition that can be exploited to spawn a privileged shell, even with real-time protection enabled. It affects systems updated with the June 2026 Patch Tuesday updates, and no customer action is required as updates are applied automatically. This is the fourth such vulnerability disclosed by researcher Chaotic Eclipse, following previous flaws like BlueHammer and UnDefend.

AI-extracted · verify before operational use

No entities or IoCs were extracted from this article.