MicrosoftRadar Independent status for Microsoft services

Microsoft Defender Elevation of Privilege Vulnerability

CVE-2026-50656 is an elevation of privilege vulnerability in Microsoft Defender (rated Important, CVSS 7.8). Microsoft reports that it was publicly disclosed before a fix.

Publicly disclosed1 version

Facts

Microsoft id
CVE-2026-50656
Status
Publicly disclosed
Products
Microsoft Defender
Severity
Important
Impact
Elevation of Privilege
CVSS
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
Exploited
No
Publicly disclosed
Yes
Exploitability
Exploitation More Likely
Customer action required
Yes
Release
2026-Jun
Assigned by
Microsoft
Weakness
CWE-59: Improper Link Resolution Before File Access ('Link Following')
MSRC revision
2.0
Status pages
Microsoft Defender status
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Security updates · open the original at Microsoft

Microsoft's revision notes

  1. Revision 1.0, 2026-06-16: Information published.
  2. Revision 2.0, 2026-07-08: Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656.

Microsoft says

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

Security updates,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    As first seen: Publicly disclosed
    Status
    Publicly disclosed

    Seen by us · Microsoft's timestamp · Microsoft's page

Other changes for Microsoft Defender

Last updated