Microsoft Defender Rogue Planet Zero-Day Grants SYSTEM Access on Updated Windows
Summary: A researcher using the name Chaotic Eclipse published a proof-of-concept exploit called RoguePlanet for a Microsoft Defender zero-day, describing it as a race condition that yields a SYSTEM-level shell when it succeeds and that was tested on Windows 11 and 10 machines with the June 2026 Patch Tuesday updates installed. The researcher says the exploit does not work on Windows Server in its current form because standard users cannot mount an ISO image, while maintaining that Server installations are also vulnerable and the exploit would need redesigning.
Why it matters: The exploit works on fully patched Windows 11 and 10 systems, and the researcher claims to hold additional memory corruption vulnerabilities in Defender and other components - so the exposure does not end with this one PoC.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026