A zero-day vulnerability in Microsoft Defender, dubbed RoguePlanet, has been disclosed by a security researcher known as Chaotic Eclipse, allowing attackers to gain SYSTEM access on updated Windows systems. The exploit, which is a race condition, has been successfully demonstrated with a 100% success rate by the researcher. This vulnerability poses a significant threat as it can be used to escalate privileges and gain control of a system. The researcher has released a proof-of-concept exploit on GitHub, highlighting the need for immediate action to assess exposure. Microsoft has not yet released a patch for this vulnerability, leaving users vulnerable to potential attacks1. The existence of this zero-day exploit underscores the importance of prompt patching and highlights the need for organizations to prioritize vulnerability management to prevent potential breaches, so what matters most to security practitioners is to assess their exposure to this vulnerability immediately.
Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
⚠️ Critical Alert
Why This Matters
Zero-day activity targeting Microsoft means patching windows are already closing — assess your exposure immediately.
References
- The Hacker News. (2026, June 10). Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows. *The Hacker News*. https://thehackernews.com/2026/06/microsoft-defender-rogueplanet-zero-day.html
Original Source
The Hacker News
Read original →