RoguePlanet Privilege Escalation in Defender Finally Patched, No Action Needed

1 min read
Source: The Hacker News
RoguePlanet Privilege Escalation in Defender Finally Patched, No Action Needed
Photo: The Hacker News
TL;DR

Microsoft issued security updates addressing RoguePlanet, a privilege-escalation flaw in the Microsoft Malware Protection Engine (mpengine.dll) that could spawn a SYSTEM shell. The fix arrives in Defender engine version 1.1.26060.3008 with defense-in-depth hardening. Disclosed by Chaotic Eclipse, RoguePlanet can be exploited on Windows systems with the June 2026 Patch Tuesday and works regardless of real-time protection. Microsoft says no customer action is required beyond automatic updates.

Share this article

Want the full story? Read the original reporting

Read on The Hacker News