Vulnerability intelligence

CVE-2026-50656

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVSS Score

7.8

High

EPSS — Exploit Probability

11%

Riskier than 95% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

9 articles across 6 outlets · first covered Jun 17, 2026 · latest Jul 9, 2026

Tracked incidents

incident open 11 articles

Microsoft patches Windows Defender zero‑day elevation of privilege flaw (CVE-2026-50656)

Coverage timeline

Microsoft patches Windows Defender zero day CVE-2026-50656
www.darkreading.com · Jul 9, 2026
Patch for Windows Defender 0-day could allow attackers to fill hard disk
arstechnica.com · Jul 9, 2026
Microsoft patches zero day EoP flaw in Defender, CVE-2026-50656
www.malwarebytes.com · Jul 9, 2026
Microsoft patches Defender bug CVE-2026-50656 after local exploit
securityaffairs.com · Jul 9, 2026
Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access
securityonline.info · Jul 9, 2026
Microsoft patches privilege escalation flaw CVE-2026-50
www.securityweek.com · Jul 9, 2026
Microsoft Defender Bug CVE-2026-50656 Allows Full Windows Control
www.malwarebytes.com · Jun 18, 2026
Microsoft Defender Zero Day Lets Attackers Run SYSTEM Code
securityaffairs.com · Jun 18, 2026
Microsoft Defender bug CVE-2026-50656 allows admin takeover
www.securityweek.com · Jun 17, 2026