> TritonInfoSec News
Home / Jun 18, 2026 / Story
0
#4 The Hacker News general June 17, 2026 at 17:36 UTC

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

By [email protected] (The Hacker News)

AI Summary

Microsoft has confirmed CVE-2026-50656 (CVSS 7.8), a privilege escalation zero-day in the Microsoft Malware Protection Engine codenamed 'RoguePlanet,' with a patch still in development. Public PoC code exploiting a race condition to spawn a SYSTEM-level command prompt is already circulating, making this a high-priority exposure for any Windows endpoint running Defender.

Read full article → https://thehackernews.com/2026/06/microsoft-confir…

Relevance score: 87.0/100

# More from June 18

  1. 1
    Massive breach spills credentials for thousands of sensitive networks Ars Technica Security
  2. 2
    FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices. BleepingComputer
  3. 3
    Critical Fortinet FortiSandbox flaws now exploited in attacks BleepingComputer
  4. 5
    144 Mastra npm Packages Compromised via Hijacked Contributor Account The Hacker News
  5. 6
    CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution The Hacker News
  6. 7
    Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack SecurityWeek
  7. 8
    GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say The Record
  8. 9
    Critical Copilot vulnerability allowed hackers to seal 2FA code from users Ars Technica Security
  9. 10
    Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats The Hacker News