Vulnerability intelligence
CVE-2026-50656
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVSS Score
7.8
High
EPSS — Exploit Probability
11%
Riskier than 96% of all CVEs · checked 2026-09-15
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
13 articles across 6 outlets · first covered Jun 17, 2026 · latest Sep 10, 2026
Associated threat actors
Coverage timeline
-
Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systemswww.securityweek.com · Sep 10, 2026
-
ShieldBreak exploit hits Microsoft Defender via CVE-2026-50656www.securityweek.com · Aug 13, 2026
-
Proof of concept bypasses Defender patch for CVE-2026-50656securityaffairs.com · Aug 12, 2026
-
ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656securityonline.info · Aug 12, 2026
-
Microsoft patches Windows Defender zero day CVE-2026-50656www.darkreading.com · Jul 9, 2026
-
Patch for Windows Defender 0-day could allow attackers to fill hard diskarstechnica.com · Jul 9, 2026
-
Microsoft patches zero day EoP flaw in Defender, CVE-2026-50656www.malwarebytes.com · Jul 9, 2026
-
Microsoft patches Defender bug CVE-2026-50656 after local exploitsecurityaffairs.com · Jul 9, 2026
-
Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Accesssecurityonline.info · Jul 9, 2026
-
Microsoft patches privilege escalation flaw CVE-2026-50www.securityweek.com · Jul 9, 2026
-
Microsoft Defender Bug CVE-2026-50656 Allows Full Windows Controlwww.malwarebytes.com · Jun 18, 2026
-
Microsoft Defender Zero Day Lets Attackers Run SYSTEM Codesecurityaffairs.com · Jun 18, 2026
-
Microsoft Defender bug CVE-2026-50656 allows admin takeoverwww.securityweek.com · Jun 17, 2026