Microsoft announced the disclosure of a Defender zero-day named RoguePlanet. Tracked as CVE-2026-50656, successful exploitation of the vulnerability may allow an attacker to gain SYSTEM-level access. Microsoft mentioned in the advisory that they are aware of an elevation-of-privileges vulnerability in the Microsoft Malware Protection Engine in Microsoft Defender.