INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Microsoft Confirms RoguePlanet Defender Zero-Day Patch

| 2026-06-17 17:36 CRITICAL HIGH EXPLOITED VULNERABILITY VULNERABILITY DISCLOSURE
Executive Summary
AI-generated
Microsoft has formally disclosed a patch to address the RoguePlanet zero-day codenamed Defender. The vulnerability, assigned CVE-2026-50656 with a CVSS score of 7.8, is described as a privilege escalation flaw in Microsoft Malware Protection Engine in Microsoft Defender. This comes nearly a week after security researcher Chaotic Eclipse released RoguePlanet, calling it an example of a race condition that grants attackers shell-level privileges. The patch is currently under development and expected to be released soon, with the company aware of an elevation of privilege vulnerability in its Windows Malware Protection Engine.
Technical Mitigations AI-generated
* Implement a secure patching strategy, such as using vulnerability scanning tools and prioritizing fixes based on severity and impact. * Regularly update software and systems to ensure timely patches for known vulnerabilities before they can be exploited by attackers. * Use least privilege access policies to limit the privileges of users and applications, reducing the attack surface and minimizing potential damage in case of a breach.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

sn•••••.org
ht•••••.sys
up•••••.dll
ui•••••.dll
ux•••••.dll
fd•••••.dll
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
PandoraPandora CVE-2026-45608CVE-2026-45608 CVE-2026-42992CVE-2026-42992 CVE-2026-40371CVE-2026-40371 CVE-2026-45498CVE-2026-45498 CVE-2026-42974CVE-2026-42974 CVE-2026-45466CVE-2026-45466 CVE-2026-44799CVE-2026-44799 CVE-2026-42979CVE-2026-42979 CVE-2026-47641CVE-2026-47641 CVE-2026-47298CVE-2026-47298 CVE-2026-45655CVE-2026-45655 CVE-2026-45635CVE-2026-45635 CVE-2026-42983CVE-2026-42983 CVE-2026-41092CVE-2026-41092 CVE-2026-42837CVE-2026-42837 CVE-2026-42970CVE-2026-42970 CVE-2026-45640CVE-2026-45640 CVE-2026-48568CVE-2026-48568 CVE-2026-45483CVE-2026-45483 CVE-2026-47293CVE-2026-47293 CVE-2026-48560CVE-2026-48560 CVE-2026-48566CVE-2026-48566 CVE-2026-42984CVE-2026-42984 CVE-2026-42972CVE-2026-42972 CVE-2026-45476CVE-2026-45476 CVE-2026-45588CVE-2026-45588 CVE-2026-42910CVE-2026-42910 CVE-2026-47643CVE-2026-47643 CVE-2026-45606CVE-2026-45606 CVE-2026-48565CVE-2026-48565 CVE-2026-33113CVE-2026-33113 CVE-2026-47292CVE-2026-47292 CVE-2026-45591CVE-2026-45591 CVE-2026-45603CVE-2026-45603 CVE-2026-50508CVE-2026-50508 CVE-2026-42971CVE-2026-42971 CVE-2026-48570CVE-2026-48570 CVE-2026-50656CVE-2026-50656 CVE-2026-48574CVE-2026-48574 CVE-2026-49160CVE-2026-49160 CVE-2026-45658CVE-2026-45658 CVE-2026-45639CVE-2026-45639 CVE-2026-45599CVE-2026-45599 CVE-2026-45636CVE-2026-45636 CVE-2026-44813CVE-2026-44813 CVE-2026-47634CVE-2026-47634 CVE-2026-42987CVE-2026-42987 CVE-2026-45497CVE-2026-45497 CVE-2026-44824CVE-2026-44824 CVE-2026-42993CVE-2026-42993 CVE-2026-45586CVE-2026-45586 CVE-2026-47639CVE-2026-47639 CVE-2026-42908CVE-2026-42908 CVE-2026-42978CVE-2026-42978 CVE-2026-42824CVE-2026-42824 CVE-2026-45472CVE-2026-45472 CVE-2026-45457CVE-2026-45457 CVE-2026-45595CVE-2026-45595 CVE-2026-42909CVE-2026-42909 CVE-2026-45491CVE-2026-45491 CVE-2026-45602CVE-2026-45602 CVE-2026-45490CVE-2026-45490 CVE-2026-44815CVE-2026-44815 CVE-2026-45593CVE-2026-45593 CVE-2026-45455CVE-2026-45455 CVE-2026-42968CVE-2026-42968 CVE-2026-44820CVE-2026-44820 CVE-2026-45643CVE-2026-45643 CVE-2026-45597CVE-2026-45597 CVE-2026-42828CVE-2026-42828 CVE-2026-40409CVE-2026-40409 CVE-2026-45467CVE-2026-45467 CVE-2026-42902CVE-2026-42902 CVE-2026-42836CVE-2026-42836 CVE-2026-45656CVE-2026-45656 CVE-2026-47644CVE-2026-47644 CVE-2026-47287CVE-2026-47287 CVE-2026-45649CVE-2026-45649 CVE-2026-42973CVE-2026-42973 CVE-2026-45474CVE-2026-45474 CVE-2026-45487CVE-2026-45487 CVE-2026-45484CVE-2026-45484 CVE-2026-44809CVE-2026-44809 CVE-2026-40404CVE-2026-40404 CVE-2026-45592CVE-2026-45592 CVE-2026-45458CVE-2026-45458 CVE-2026-45647CVE-2026-45647 CVE-2026-42913CVE-2026-42913 CVE-2026-47636CVE-2026-47636 CVE-2026-45653CVE-2026-45653 CVE-2026-45469CVE-2026-45469 CVE-2026-45462CVE-2026-45462 CVE-2026-47284CVE-2026-47284 CVE-2026-45461CVE-2026-45461 CVE-2026-44804CVE-2026-44804 CVE-2026-44819CVE-2026-44819 CVE-2026-45459CVE-2026-45459 CVE-2026-44810CVE-2026-44810 CVE-2026-44821CVE-2026-44821 CVE-2026-47638CVE-2026-47638 CVE-2026-44802CVE-2026-44802 CVE-2026-33825CVE-2026-33825 CVE-2026-41098CVE-2026-41098 CVE-2026-45601CVE-2026-45601 CVE-2026-42991CVE-2026-42991 CVE-2026-44811CVE-2026-44811 CVE-2026-48569CVE-2026-48569 CVE-2026-42906CVE-2026-42906 CVE-2026-48575CVE-2026-48575 CVE-2026-42903CVE-2026-42903 CVE-2026-47288CVE-2026-47288 CVE-2026-45583CVE-2026-45583 CVE-2026-44812CVE-2026-44812 CVE-2026-32193CVE-2026-32193 CVE-2026-42907CVE-2026-42907 CVE-2026-48562CVE-2026-48562 CVE-2026-45479CVE-2026-45479 CVE-2026-45502CVE-2026-45502 CVE-2026-45486CVE-2026-45486 CVE-2026-45471CVE-2026-45471 CVE-2026-42981CVE-2026-42981 CVE-2026-45604CVE-2026-45604 CVE-2026-45485CVE-2026-45485 CVE-2026-44817CVE-2026-44817 CVE-2026-42916CVE-2026-42916 CVE-2026-45454CVE-2026-45454 CVE-2026-48567CVE-2026-48567 CVE-2026-44801CVE-2026-44801 CVE-2026-47654CVE-2026-47654 CVE-2026-44805CVE-2026-44805 CVE-2026-45600CVE-2026-45600 CVE-2026-45648CVE-2026-45648 CVE-2026-45482CVE-2026-45482 CVE-2026-45654CVE-2026-45654 CVE-2026-42904CVE-2026-42904 CVE-2026-45481CVE-2026-45481 CVE-2025-10263CVE-2025-10263 CVE-2026-42969CVE-2026-42969 CVE-2026-45594CVE-2026-45594 CVE-2026-41091CVE-2026-41091 CVE-2026-44823CVE-2026-44823 CVE-2026-42905CVE-2026-42905 CVE-2026-47635CVE-2026-47635 CVE-2026-44822CVE-2026-44822 CVE-2026-47637CVE-2026-47637 CVE-2026-45460CVE-2026-45460 CVE-2026-42911CVE-2026-42911 CVE-2026-45501CVE-2026-45501 CVE-2026-45500CVE-2026-45500 CVE-2026-42912CVE-2026-42912 CVE-2026-45453CVE-2026-45453 CVE-2026-48578CVE-2026-48578 CVE-2026-47640CVE-2026-47640 CVE-2026-42977CVE-2026-42977 CVE-2026-45645CVE-2026-45645 CVE-2026-45468CVE-2026-45468 CVE-2026-33828CVE-2026-33828 CVE-2026-45475CVE-2026-45475 CVE-2026-8863CVE-2026-8863 CVE-2026-45634CVE-2026-45634 CVE-2026-48576CVE-2026-48576 CVE-2026-47289CVE-2026-47289 CVE-2026-47281CVE-2026-47281 CVE-2026-42914CVE-2026-42914 CVE-2026-40376CVE-2026-40376 CVE-2026-45657CVE-2026-45657 CVE-2026-48579CVE-2026-48579 CVE-2026-47291CVE-2026-47291 CVE-2026-47648CVE-2026-47648 CVE-2026-45465CVE-2026-45465 CVE-2026-45638CVE-2026-45638 CVE-2026-45607CVE-2026-45607 CVE-2026-48583CVE-2026-48583 CVE-2026-47655CVE-2026-47655 CVE-2026-44808CVE-2026-44808 CVE-2026-47656CVE-2026-47656 CVE-2026-34335CVE-2026-34335 CVE-2026-44818CVE-2026-44818 CVE-2026-42989CVE-2026-42989 CVE-2026-42980CVE-2026-42980 CVE-2026-49161CVE-2026-49161 CVE-2026-45644CVE-2026-45644 CVE-2026-47653CVE-2026-47653 CVE-2026-47631CVE-2026-47631 CVE-2026-44814CVE-2026-44814 CVE-2026-42986CVE-2026-42986 CVE-2026-41108CVE-2026-41108 CVE-2026-45598CVE-2026-45598 CVE-2026-42985CVE-2026-42985 CVE-2026-50507CVE-2026-50507 CVE-2026-45650CVE-2026-45650 CVE-2026-45464CVE-2026-45464 CVE-2026-45503CVE-2026-45503 CVE-2026-48573CVE-2026-48573 CVE-2026-42835CVE-2026-42835 CVE-2026-45641CVE-2026-45641 CVE-2026-48563CVE-2026-48563 CVE-2026-45504CVE-2026-45504 CVE-2026-45456CVE-2026-45456 CVE-2026-45463CVE-2026-45463 CVE-2026-44803CVE-2026-44803 CVE-2026-45637CVE-2026-45637 CVE-2026-45605CVE-2026-45605 CVE-2026-44807CVE-2026-44807 CVE-2026-26142CVE-2026-26142 CVE-2026-45596CVE-2026-45596 CVE-2026-42829CVE-2026-42829 CVE-2026-45642CVE-2026-45642 CVE-2026-47652CVE-2026-47652 CVE-2026-42915CVE-2026-42915
Target & Sectors
Global Scope
Incident Timeline
‎May 19
Microsoft released a patch for CVE-2026-41091 on May 19.
vulnerability CVE-2026-41091
organisation Microsoft Defender
‎2026/06/10
Microsoft told The Hacker News it was aware of the reported vulnerability and is investigating its validity.
organisation The Hacker News
‎Jun 17, 2026
Threat actors exploited a previously unknown zero-day vulnerability in Microsoft's June 2026 Patch Tuesday updates.
‎2026/06/17
Microsoft released security patches for vulnerabilities in Windows and Microsoft Office.
organisation CVE
organisation CVE-2026-33825
organisation BlueHammer
organisation RedSun
organisation Microsoft
organisation Endpoint Security / Vulnerability
organisation the Microsoft
organisation Microsoft Defender
organisation Chaotic Eclipse
organisation Nightmare-Eclipse
organisation RoguePlanet
infrastructure Windows
organisation Windows Collaborative Translation Framework
organisation CTFMON
organisation Microsoft Office
organisation Azure Kubernetes Service
organisation AKS
organisation Microsoft Outlook
organisation DHA
organisation Remote Desktop Client
organisation CVE-2026
infrastructure Linux
organisation CVE-2026-49161
infrastructure Visual Studio Code
infrastructure Android
organisation Windows Active Directory Domain Services
organisation Windows Function Discovery Service
organisation Microsoft Azure Attestation
organisation Device Health Attestation Service
organisation Windows Device Health Attestation
organisation Microsoft Azure Kubernetes Service
organisation Microsoft Bing
organisation Microsoft Defender for Endpoint CVE-2026-45647
organisation Microsoft Dynamics 365
organisation Microsoft Exchange
organisation Microsoft Graphics Component
organisation Microsoft Kinect
organisation Microsoft Live Share Canvas SDK
organisation Microsoft Office Click-To-Run CVE-2026-47293
organisation Microsoft Office Excel
organisation Microsoft Excel
organisation Microsoft Office Project CVE-2026-45483
organisation Microsoft Office SharePoint
organisation Microsoft Office SharePoint CVE-2026-45465
organisation Microsoft SharePoint
organisation Microsoft Office SharePoint CVE-2026-47634
organisation Microsoft Office SharePoint CVE-2026-47640
organisation Microsoft Teams for
organisation Microsoft UxTheme Library
organisation Denial of Service Vulnerability Important
organisation DNS
organisation Nuance PowerScribe
organisation Critical Office
organisation CVE-2026-45649 Office
infrastructure 45504 Important Microsoft Exchange Server
infrastructure 45583 Important Microsoft Exchange Server
infrastructure 45462 Microsoft SharePoint Server
victims 42993 Important Remote Desktop Client
organisation CVE-2026-50507
organisation CVE-2026-44815
organisation KDC
organisation Windows Deployment Services
organisation WDS
organisation CVE-2026-45658
organisation CVE-2026-47288
organisation DHCP
organisation CVE-2026-45604
organisation CVE-2026-45655
organisation Important Windows Administrator Protection
organisation Windows Ancillary Function
organisation Windows Application Identity
organisation DHCP Client Service
organisation Windows Dynamic Host Configuration Protocol
organisation Windows Kerberos Key Distribution Center
organisation CVE-2025-10263 Completion
organisation TLBI
organisation Critical Windows Kernel
organisation Windows Kernel
organisation Windows Network Controller
organisation Microsoft Windows
organisation Windows Active Directory
organisation Windows Kerberos Key Distribution Centre
organisation Windows Graphics
organisation Windows Remote Desktop
organisation DHCP Client
organisation Microsoft SQL
organisation the Windows Graphics
organisation Windows Remote Desktop Client
organisation Windows DHCP Client
organisation Powerscribe
organisation Stack
organisation Heap
organisation Windows Graphics Component
organisation CVE-2026-45593
organisation CVE-2026-8863
organisation CVE-2026-45656
organisation Windows Telephony
organisation K - GRFX
organisation Windows Graphics
infrastructure 42904 IP Elevation
organisation RCE
organisation the Remote Desktop Client
organisation the Windows DHCP Client
organisation Elevation of Privilege Vulnerability
organisation Integer
organisation TCP
organisation IP
organisation Windows Cryptographic Services
organisation Microsoft Fixes
organisation DoS
organisation EoP
organisation Microsoft Azure Network Adapter
organisation Copilot Chat
organisation Microsoft Edge
organisation Microsoft Exchange Online
organisation Microsoft Graph
organisation Network
organisation Cisco Security Firewall
organisation SRU
organisation Snort 3
organisation Trend Micro’s Zero Day Initiative
organisation Microsoft’s Security Response Center
victims 15 company
organisation CVE Title Severity
‎June 2026
Microsoft released a monthly security update for June 2026, which included 206 vulnerabilities affecting 32 products.
organisation Microsoft
general_metric 206 vulnerabilities
general_metric 32 products
general_metric 200 vulnerabilities
general_metric 3 Snort
‎Tuesday for June 2026
Microsoft released a patch for its software on June 27, 2026.
organisation Microsoft Patch
organisation Snort
Tactical Metrics
Metrics
infrastructure
‎Windows
Affected Product
Metrics
infrastructure
‎Microsoft Office
Affected Product
Metrics
infrastructure
‎Linux
Affected Product
Metrics
victims
15
Company
Metrics
infrastructure
‎Visual Studio Code
Affected Product
Metrics
infrastructure
‎Android
Affected Product
Metrics
infrastructure
45,504
Important Microsoft Exchange Server
Metrics
infrastructure
45,583
Important Microsoft Exchange Server
Metrics
infrastructure
45,462
Microsoft Sharepoint Server
Metrics
victims
42,993
Important Remote Desktop Client
Metrics
infrastructure
42,904
Ip Elevation
Intelligence Sources