Skip to content
Sign in
CVE-2026-506567.8HighCWE-59

Microsoft Malware Protection Engine vulnerability

Microsoft · Microsoft Malware Protection Engine

Not in CISA KEVVendor fix available
11.2%probability of exploitation in the next 30 days
95th percentile
050100

Higher than 95% of scored CVEs

7.8HighCVSS 3.1
LowHigh

DescriptionNVD

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

Coverage13 articles · 6 outlets

One row per outlet, in order of first report. First in our coverage: SecurityWeek, 17 Jun.

Full timeline
Quiet for 7 weekslast report 10 Sep13 articles6 outlets
17 Jun · SecurityWeek first24 Aug16 Sep9 OctNow
  • Wed 17 Jun, 10:10 UTC. SecurityWeek, first report. Microsoft Defender bug CVE-2026-50656 allows admin takeover.
  • Thu 18 Jun, 10:30 UTC. Security Affairs, its first report on the story. Microsoft Defender Zero Day Lets Attackers Run SYSTEM Code.
  • Thu 18 Jun, 13:30 UTC. Malwarebytes, its first report on the story. Microsoft Defender Bug CVE-2026-50656 Allows Full Windows Control.
  • Thu 9 Jul, 11:09 UTC. SecurityWeek. Microsoft patches privilege escalation flaw CVE-2026-50.
  • Thu 9 Jul, 11:09 UTC. SecurityOnline, its first report on the story. Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access.
  • Thu 9 Jul, 11:46 UTC. Security Affairs. Microsoft patches Defender bug CVE-2026-50656 after local exploit.
  • Thu 9 Jul, 11:47 UTC. Malwarebytes. Microsoft patches zero day EoP flaw in Defender, CVE-2026-50656.
  • Thu 9 Jul, 21:01 UTC. Ars Technica, its first report on the story. Patch for Windows Defender 0-day could allow attackers to fill hard disk.
  • Thu 9 Jul, 21:01 UTC. Dark Reading, its first report on the story. Microsoft patches Windows Defender zero day CVE-2026-50656.
  • Wed 12 Aug, 06:26 UTC. SecurityOnline. ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656.
  • Wed 12 Aug, 08:32 UTC. Security Affairs. Proof of concept bypasses Defender patch for CVE-2026-50656.
  • Thu 13 Aug, 08:51 UTC. SecurityWeek. ShieldBreak exploit hits Microsoft Defender via CVE-2026-50656.
  • Thu 10 Sep, 07:30 UTC. SecurityWeek. Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems.
All coveragerunning total13SecurityWeek4Security Af…3Malwarebytes2SecurityOnl…2Ars Technica1Dark Reading118 Jun3 Aug18 SepNow
  • First report
  • Article
  • Running total
Show as table
13 articles about CVE-2026-50656 from 6 outlets
Published (UTC)OutletHeadline
17 Jun 10:10SecurityWeekMicrosoft Defender bug CVE-2026-50656 allows admin takeover
18 Jun 10:30Security AffairsMicrosoft Defender Zero Day Lets Attackers Run SYSTEM Code
18 Jun 13:30MalwarebytesMicrosoft Defender Bug CVE-2026-50656 Allows Full Windows Control
9 Jul 11:09SecurityWeekMicrosoft patches privilege escalation flaw CVE-2026-50
9 Jul 11:09SecurityOnlineMicrosoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access
9 Jul 11:46Security AffairsMicrosoft patches Defender bug CVE-2026-50656 after local exploit
9 Jul 11:47MalwarebytesMicrosoft patches zero day EoP flaw in Defender, CVE-2026-50656
9 Jul 21:01Ars TechnicaPatch for Windows Defender 0-day could allow attackers to fill hard disk
9 Jul 21:01Dark ReadingMicrosoft patches Windows Defender zero day CVE-2026-50656
12 Aug 06:26SecurityOnlineShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656
12 Aug 08:32Security AffairsProof of concept bypasses Defender patch for CVE-2026-50656
13 Aug 08:51SecurityWeekShieldBreak exploit hits Microsoft Defender via CVE-2026-50656
10 Sep 07:30SecurityWeekMicrosoft Defender Zero Day Bypasses Patches to Expose Windows Systems
  1. Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems
    SecurityWeek
  2. ShieldBreak exploit hits Microsoft Defender via CVE-2026-50656
    SecurityWeek
  3. Proof of concept bypasses Defender patch for CVE-2026-50656
    Security Affairs
  4. ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656
    SecurityOnline
  5. Microsoft patches Windows Defender zero day CVE-2026-50656
    Dark Reading
  6. Patch for Windows Defender 0-day could allow attackers to fill hard disk
    Ars Technica
  7. Microsoft patches zero day EoP flaw in Defender, CVE-2026-50656
    Malwarebytes
  8. Microsoft patches Defender bug CVE-2026-50656 after local exploit
    Security Affairs
Show 5 more

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in