Elevation of Privilege in Microsoft Defender by Microsoft
CVE-2026-50656

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Malware Protection Engine
Vendor
CVE Published:
16 June 2026

What is CVE-2026-50656?

Microsoft has identified a vulnerability in the Microsoft Malware Protection Engine associated with Microsoft Defender, allowing unauthorized elevation of privilege. This vulnerability, called 'RoguePlanet', could enable an attacker to gain escalated access to the system. Microsoft is currently developing a security update to address this issue and mitigate potential risks. Further information will be provided through Microsoft’s channels once the update is available.

Affected Version(s)

Microsoft Malware Protection Engine -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.