{"id":232835,"date":"2026-06-17T14:16:00","date_gmt":"2026-06-17T18:16:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/17\/microsoft-confirms-rogueplanet-defender-zero-day-says-patch-is-in-development\/"},"modified":"2026-06-17T15:20:13","modified_gmt":"2026-06-17T19:20:13","slug":"microsoft-confirms-rogueplanet-defender-zero-day-says-patch-is-in-development","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/17\/microsoft-confirms-rogueplanet-defender-zero-day-says-patch-is-in-development\/","title":{"rendered":"Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development"},"content":{"rendered":"

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/06\/microsoft-confirms-rogueplanet-defender_02022423645.html<\/a><\/p>\n

Publish Date: 2026-06-17 14:16:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points.
\n\ue804Ravie Lakshmanan\ue802Jun 17, 2026Endpoint Security \/ Vulnerability
\nMicrosoft has formally disclosed that it’s working to release a patch to address a Defender zero-day codenamed RoguePlanet.<\/p>\n

The vulnerability has now been assigned the CVE identifier CVE-2026-50656 (CVSS score: 7.8), with the tech giant describing it as a privilege escalation flaw.<\/p>\n

“Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as ‘RoguePlanet,'” the company said. “We are working to provide a high-quality security update that addresses this vulnerability.”\u00a0<\/p>\n

The development comes nearly a week after a security researcher named Chaotic Eclipse (aka Nightmare-Eclipse) released RoguePlanet, calling the exploit a case of a race condition that grants attackers a shell with SYSTEM-level privileges.<\/p>\n

“The exploit is a race condition, so it’s a hit or miss,” the researcher noted. “I have managed to get a 100% success rate on some machines while it struggled to work on others.”<\/p>\n

In an update shared Tuesday, the researcher added: “I forgot to add one thing, surprisingly, the PoC for RoguePlanet works regardless if real-time protection is on or not, which is hilarious. I think it even works in the case of passive mode, but not really sure, haven’t tested that.”<\/p>\n

Microsoft told The Hacker News last week that it’s aware of the reported vulnerability and that it’s “actively investigating the validity and potential applicability of these claims.”<\/p>\n

RoguePlanet is the fourth Defender vulnerability disclosed by Chaotic Eclipse after BlueHammer (CVE-2026-33825), UnDefend (CVE-2026-45498), and RedSun (CVE-2026-41091), all of which have since been patched by Microsoft.<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development https:\/\/thehackernews.com\/2026\/06\/microsoft-confirms-rogueplanet-defender_02022423645.html Publish Date: 2026-06-17 14:16:00…<\/p>\n","protected":false},"author":1,"featured_media":232836,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgy3ayOlDb3vsL747G9hStxxjTd3N5i2u8hegcT_hTs4RlNqylS_HyYH4mGLQEavD-QwH3G4l-p2tE5xrXoeK-Btj5YjbENpZcnqRZ7mXCjnJgqHKaoqyE3I3yqy3tYxafbDGNOMrDsvTnJ8UKkn7DDQ8PY_sQNZI6TsNTV0lOmSqs1uxUKm3pgpmkSDpeZ\/s1600\/ms-patch.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[31,35,32,27],"class_list":["post-232835","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-exploit","tag-hacker","tag-malware","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232835"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=232835"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232835\/revisions"}],"predecessor-version":[{"id":232837,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232835\/revisions\/232837"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/232836"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=232835"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=232835"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=232835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}