Home / Jul 10, 2026 / Story
0
#2 The Hacker News general July 09, 2026 at 08:48 UTC

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

By [email protected] (The Hacker News)

AI Summary

Microsoft patched CVE-2026-50656 (CVSS 7.8), a privilege escalation flaw in the Microsoft Malware Protection Engine (mpengine.dll) dubbed 'RoguePlanet,' nearly a month after researcher NightmareEclipse published a public PoC. The fix was delivered as an out-of-band Malware Protection Engine update rather than a standard Patch Tuesday release, and a secondary patch issue may allow attackers to fill a target's hard disk.

Relevance score: 85.0/100

# More from July 10