// Microsoft 365HIGH
Microsoft acknowledged CVE-2026-50656 (RoguePlanet), a zero-day elevation-of-privilege flaw in Microsoft Defender that exploits a race condition to spawn a command shell with SYSTEM privileges. Public proof-of-concept code released by Nightmare Eclipse on June 16, 2026. Affects fully patched Windows 10 and Windows 11 devices. Microsoft is working on a high-quality patch but has not announced a timeline; no wild exploitation detected yet.
- Microsoft Working on Patch for 'RoguePlanet' Zero-Day - Security(opens in a new tab)
- Microsoft working on patch for RoguePlanet Defender zero-day (CV(opens in a new tab)
- Microsoft scrambles to patch a Defender security flaw called Rog(opens in a new tab)
- Weekly Exploit Roundup 2026-06-23 - Xloggs AI Security and News(opens in a new tab)
// Get alerts for Microsoft 365