CVE-2026-50656: Microsoft Malware Protection Engine

What is CVE-2026-50656?

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVSS7 NVD 3.1

SeverityHIGH

ExploitationNo exploitation reported

EPSS3% · P88

Triage statusNo Known Exploit

ActionPatch this week

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD published2026-06-16

NVD last modified2026-07-09

Timeline

2026-06-16Published to the U.S. National Vulnerability Database (NVD)
2026-06-18First covered in a defend.network daily briefing
2026-07-09NVD record last updated

Affected product

Microsoft Malware Protection Engine

Remediation Steps

Apply the latest Microsoft security updates for Windows Defender immediately
Verify Malware Protection Engine version is current via Windows Defender settings
Monitor for suspicious process elevation and SYSTEM-level privilege grants on affected systems

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 1 of July 2026 (July 6 – 12)
Vulnerability Priority Report – Week 3 of June 2026 (June 15 – 21)
Microsoft Defender zero-day, FortiBleed exposes 73k devices, GitHub worm spreads (2026-06-18)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.