Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
Source Reddit Cybersecurity
Rated by Threat Radar
Data as of 10 Jun 2026, 06:40 UTC
What to do
AI-suggested
Microsoft has not publicly released a fix for this vulnerability as of the information available. Organizations should monitor official Microsoft Security Response Center (MSRC) advisories for updates. Since the exploit is a race condition involving Defender components, temporary mitigations are not detailed in the available information. Avoid running untrusted code and consider limiting user privileges where possible until an official patch is released.
Discussion
A zero-day vulnerability named RoguePlanet in Microsoft Defender allows attackers to gain SYSTEM-level access on fully updated Windows 10 and 11 machines. The exploit is a race condition that can result in arbitrary code execution with the highest privileges. It has been publicly disclosed with a proof-of-concept by a security researcher known as Chaotic Eclipse. The vulnerability affects desktop Windows systems with June 2026 Patch Tuesday updates installed but does not currently work on Windows Server due to mounting restrictions. The researcher has criticized Microsoft's handling of vulnerability disclosures and has released multiple related exploits. Microsoft has condemned the public disclosures but has not yet provided an official patch.
r/cybersecurity (opens in a new tab)u/sunychoudhary0 points0 comments