CVE-2026-50656: Microsoft Confirms Defender ‘RoguePlanet’ Zero-Day — No Patch Available Yet
Microsoft has confirmed CVE-2026-50656, a zero-day TOCTOU race condition in Microsoft Defender dubbed ‘RoguePlanet,’ that allows low-privilege attackers to escalate to SYSTEM on fully patched Windows 10 and 11 systems. A functional public PoC exists, no patch is yet available, and Microsoft rates exploitation as ‘More Likely.’
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.