CVE-2026-50656
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
A vulnerability in the Microsoft Malware Protection Engine in Microsoft Defender allows elevation of privilege. This flaw, publicly known as "RoguePlanet", could be exploited by an attacker to gain higher privileges on the system.
Risk Assessment
The risk involves potential privilege escalation by an attacker, which could lead to system compromise, malware installation, or theft of sensitive data.
Recommendation
It is recommended to immediately apply the security update provided by Microsoft for the Malware Protection Engine in Microsoft Defender.
Other vulnerabilities in Microsoft Malware Protection Engine
See all- CVE-2017-8558High
The Microsoft Malware Protection Engine on various Windows versions improperly scans a specially crafted file, leading to memory corruption. This may allow for remote code execution.
- CVE-2017-0290High
The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to memory corruption. This may allow for remote code execution.
- CVE-2026-69414High
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak".
Original NVD description (English source)
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
Vulnerability data from NVD (NIST) · CISA KEV · EPSS