RoguePlanet gives local attackers SYSTEM access on patched Windows Defender
CVE-2026-50656, dubbed "RoguePlanet," lets a low‑privileged user spawn a SYSTEM‑level command shell via a race condition in Microsoft Defender's scanning engine. The flaw works even with real‑time protection on, and no official patch was released as of late June 2026.