← Back to Vulnerability Reports CVE Intelligence

CVE-2026-50656

Microsoft Malware Protection Engine•HIGH · CVSS 7•No exploitation reported

What is CVE-2026-50656?

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVSS7 NVD 3.1

SeverityHIGH

ExploitationNo exploitation reported

EPSS11% · P96

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWECWE-59

NVD published2026-06-16

NVD last modified2026-10-25

Timeline

2026-06-16Published to the U.S. National Vulnerability Database (NVD)
2026-06-18First covered in a defend.network daily briefing
2026-10-25NVD record last updated

Affected product

Microsoft Malware Protection Engine

Remediation Steps

Apply the latest Microsoft security updates for Windows Defender immediately
Verify Malware Protection Engine version is current via Windows Defender settings
Monitor for suspicious process elevation and SYSTEM-level privilege grants on affected systems

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 1 of July 2026 (July 6 – 12)
Vulnerability Priority Report – Week 3 of June 2026 (June 15 – 21)
Microsoft Defender zero-day, FortiBleed exposes 73k devices, GitHub worm spreads (2026-06-18)

Related vulnerabilities

CVE-2026-41091 – Microsoft Defender (same product)
CVE-2026-81963 – Microsoft Windows (same vendor)
CVE-2026-96951 – Microsoft Windows (same vendor)
CVE-2026-75682 – Adobe Connect (same vendor)
CVE-2026-85889 – Microsoft Azure Ai Foundry (same vendor)
CVE-2026-69730 – Microsoft Windows (same vendor)

Microsoft: 390 known exploited vulnerabilities (CISA KEV) →

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.