Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched Windows

Chaotic Eclipse published a proof-of-concept exploit named RoguePlanet that abuses a race condition in Microsoft Defender to spawn a SYSTEM shell on fully patched Windows 10 and 11 (June 2026 updates). The report details the exploit development, claims of additional memory corruption flaws affecting Defender and other components, prior related zero-day disclosures by the researcher, and Microsoft’s public criticism of the uncoordinated disclosures.