Microsoft has released a patch for CVE-2026-50656, a local privilege escalation vulnerability in the Microsoft Malware Protection Engine triggered by the RoguePlanet exploit, which involves improper link resolution before file access and allows authenticated attackers to gain SYSTEM privileges via low-complexity attacks. The vulnerability carries a CVSS 3.1 score of 7.8 (High). The article does not specify the affected or fixed version ranges, nor does it provide a workaround.
Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before file access, affects Windows 10 and Windows 11, and may allow authenticated attackers to achieve SYSTEM-level privileges on vulnerable machines by launching low-complexity attacks. The flaw’s existence was publicly revealed on June 10, hours … More → The post Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) appeared first on Help Net Security .