Microsoft patched CVE-2026-50656, a high-severity local privilege escalation flaw in the Malware Protection Engine (mpengine.dll) used by Windows Defender. The vulnerability exploits a race condition to grant SYSTEM-level privileges. A proof-of-concept exploit was published in June 2026 by researcher Nightmare-Eclipse and was confirmed to work on fully patched Windows 10 and 11 systems, demonstrating the urgency of patching.
- Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)(opens in a new tab)
- Microsoft Reins in RoguePlanet Zero-Day Threat(opens in a new tab)
- Defender Zero-Day Patched 29 Days After Public Exploit Exposed M(opens in a new tab)
// Get alerts for Microsoft Azure