Home / Latest

Photo of research lab, cryptocurrency, artificial intelligence
Image: Wikipedia
Latest

Microsoft Confirms RoguePlanet Zero-Day Vulnerability

WireByte Staff · June 18, 2026

Microsoft has confirmed a zero-day vulnerability in its Defender's Malware Protection Engine, known as RoguePlanet (CVE-2026-50656), which grants attackers SYSTEM privileges on fully patched Windows 10 and 11. The company is working on a patch, but a security researcher, Chaotic Eclipse, has disclosed seven such exploits in recent months, sparking a feud with Microsoft.

Key points

  • Microsoft has confirmed a zero-day vulnerability in its Defender's Malware Protection Engine, known as RoguePlanet (CVE-2026-50656).
  • The vulnerability, a race-condition flaw, grants attackers SYSTEM privileges on fully patched Windows 10 and 11.
  • Chaotic Eclipse, a security researcher, disclosed the vulnerability and has accused Microsoft of being disrespectful and poorly handling vulnerability disclosures.
  • This is the seventh zero-day exploit disclosed by Chaotic Eclipse in recent months, sparking a feud with Microsoft.
  • Microsoft is working on a patch for the vulnerability and will provide information in a security advisory when the update is available.

Microsoft has confirmed a zero-day vulnerability in its Defender's Malware Protection Engine, known as RoguePlanet (CVE-2026-50656). The vulnerability, a race-condition flaw, grants attackers SYSTEM privileges on fully patched Windows 10 and 11.

Chaotic Eclipse, a security researcher, disclosed the vulnerability and has accused Microsoft of being disrespectful and poorly handling vulnerability disclosures. This is the seventh zero-day exploit disclosed by Chaotic Eclipse in recent months, sparking a feud with Microsoft.

Microsoft is working on a patch for the vulnerability and will provide information in a security advisory when the update is available. The company has not commented on the feud with Chaotic Eclipse, but the incident highlights the ongoing cat-and-mouse game between security researchers and software vendors.

Sources

WireByte Staff — Editorial Team

The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.