Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

An anonymous researcher known as Chaotic Eclipse released a public proof-of-concept for a Microsoft Defender zero-day dubbed "RoguePlanet," a race-condition exploit that can grant a SYSTEM shell on Windows 10 and 11 (including machines with June 2026 updates). The PoC is reportedly unreliable across some systems but has been tested successfully and, along with other recent Defender flaws disclosed by the researcher, has been exploited in the wild; the publication follows a public dispute between the researcher and Microsoft over coordinated disclosure and account access.