CVE-2026-50656
As of 2026-06-23, CVE-2026-50656 is a CVSS 7.8 (HIGH-severity) vulnerability. Public exploit code available. EPSS exploitation probability 3.4%. Threadlinqs Intelligence tracks 2 threats exploiting it.
Last updated: 2026-06-23
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
Weaknesses (CWE)
CWE-59
Exploitation status
public exploit code available
- 0xBlackash/CVE-2026-50656 (github)
- trickest/cve (trickest)
Threats tracking this CVE
- RoguePlanet: Microsoft Defender Elevation of Privilege Vulnerability (CVE-2026-50656) Patched — HIGH
- CVE-2026-50656: RoguePlanet Microsoft Defender Zero-Day Local Privilege Escalation (Malware Protection Engine TOCTOU) — HIGH
References
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.