RoguePlanet Zero-Day Exploit Targets Microsoft Defender
On June 10, 2026, the security researcher known as Nightmare-Eclipse publicly disclosed a zero-day vulnerability in Microsoft Defender, termed 'RoguePlanet.' This exploit leverages a race condition to grant SYSTEM-level privileges on fully patched Windows 10 and Windows 11 systems. The proof-of-concept code was released shortly after Microsoft's Patch Tuesday updates, which addressed previous vulnerabilities disclosed by the same researcher. The RoguePlanet disclosure underscores ongoing tensions between independent security researchers and major software vendors regarding vulnerability disclosure practices. The incident highlights the critical need for organizations to implement robust security measures and maintain vigilance against emerging threats, even on systems considered up-to-date.
Kill Chain
