#2
The Hacker News
general
July 09, 2026 at 08:48 UTC
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
By [email protected] (The Hacker News)
AI Summary
Microsoft patched CVE-2026-50656 (CVSS 7.8), a privilege escalation flaw in the Microsoft Malware Protection Engine (mpengine.dll) dubbed 'RoguePlanet,' nearly a month after researcher NightmareEclipse published a public PoC. The fix was delivered as an out-of-band Malware Protection Engine update rather than a standard Patch Tuesday release, and a secondary patch issue may allow attackers to fill a target's hard disk.
Relevance score: 85.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →