Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
ID: db077a6e-ad40-5ac2-8172-d19f77a1058b
STIX ID: report--db077a6e-ad40-5ac2-8172-d19f77a1058b
Feed Name: Bleeping Computer
Threat Score
A security researcher known as Nightmare Eclipse published a proof-of-concept for a Microsoft Defender zero-day called "RoguePlanet" which can spawn a SYSTEM-level command prompt on fully patched Windows 10/11 via a race condition; ThreatLocker reproduced the exploit and demonstrated it, and the researcher claims additional RCE scenarios were previously developed before Microsoft mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
