RoguePlanet zero-day grants SYSTEM access on fully patched Windows
A newly released proof-of-concept exploit called RoguePlanet can take full control of Windows 10 and 11 computers even when they are fully updated. It abuses a flaw in Microsoft $MSFT Defender to gain SYSTEM-level access, and there is no patch available yet. Researchers say it is
Security researchers have published proof-of-concept code, nicknamed RoguePlanet, that abuses a race condition in Microsoft $MSFT Defender, the antivirus built into Windows. By tricking a user into opening a malicious disk image file on a remote network share, an attacker can gain SYSTEM-level access on fully patched Windows 10 and 11 machines, the highest privilege available. The code dropped on the same day as Microsoft's June Patch Tuesday. There is no patch yet, the flaw does not affect Windows Server, and no real-world attacks have been reported so far.