logo

Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges

ID: db077a6e-ad40-5ac2-8172-d19f77a1058b

STIX ID: report--db077a6e-ad40-5ac2-8172-d19f77a1058b

Feed Name: Bleeping Computer

Threat Score
80/100

Date Published: 2026-06-09

Date Updated: 2026-06-10

Author: Lawrence Abrams

...
...

A security researcher known as Nightmare Eclipse published a proof-of-concept for a Microsoft Defender zero-day called "RoguePlanet" which can spawn a SYSTEM-level command prompt on fully patched Windows 10/11 via a race condition; ThreatLocker reproduced the exploit and demonstrated it, and the researcher claims additional RCE scenarios were previously developed before Microsoft mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.