Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges (CVE-2026-47281)
Researchers disclosed a Microsoft Defender privilege-escalation zero-day dubbed RoguePlanet (CVE-2026-47281) that abuses a race condition to redirect a SYSTEM-level file operation and hand a local attacker full SYSTEM access on fully updated Windows machines.
- Victim
- Microsoft Defender