Vulnerability · Published Jun 16, 2026 · Assigned by microsoft
CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability
High 7.8
In plain English
A high-severity security flaw in Microsoft Malware Protection Engine from Microsoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 11.2% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)11.2%top 4.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Malware Protection Engine | 1.1.0.0 – before 1.1.26060.3008 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
References
- Microsoft Defender Elevation of Privilege Vulnerability vendor-advisory, patch
- https://github.com/MSNightmare/ShieldBreak exploit