Vulnerabilità · 104 giorni fa
Un livello di patch attuale non lo impedisce se la Defender Offline Scan è mai stata usata. GreatXML trasforma quel passo di setup in una rottura della fiducia duratura in WinRE, quindi un desktop Windows 10 o 11 patchato può comunque esporre i dati protetti da BitLocker dopo un riavvio in Recovery Mode.
Sfruttamento noto · CISA KEV
CVSS 7.8 HIGH: improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to… EPSS 9% (93º percentile). Patch Microsoft: Release Notes.
Data di correzione federale CISA 3 giu · data superata
Sfruttamento noto · CISA KEV
CVSS 7.8 HIGH: insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges… Patch Microsoft: Release Notes.
Data di correzione federale CISA 6 mag · data superata
9 fonti che coprono questa storia
Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
Microsoft is preparing a patch for RoguePlanet, a Defender flaw tracked as CVE-2026-50656 that can enable privilege escalation.
Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) - Help Net Security
Microsoft has acknowledged the elevation of privilege Microsoft Defender bug (CVE-2026-50656) triggered via the "RoguePlanet" exploit.
Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day
The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges.
Microsoft working on Defender patch for RoguePlanet zero-day
Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one week ago.
Risky Bulletin: CISA tightens patching rules amid bug deluge
CISA changes federal patching rules due to AI, a House Republican was hacked by Russia, ShinyHunters go on an Oracle hacking spree, and np [Read More
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
GreatXML can bypass BitLocker on Windows systems where Defender Offline Scan was used, exposing encrypted drive data.
‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.
Microsoft Patches Exploited Exchange Server Vulnerability
The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14.
Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet
The disgruntled researcher released a PoC for a Windows Defender bug that allows for system takeover, showing no sign of abandoning their ongoing feud.
Microsoft patches Exchange Server zero-day exploited in attacks
Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users.
New Windows Zero-Day Exploit ‘RoguePlanet’ Released
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft released fixes for 206 vulnerabilities across its software portfolio, including 39 Critical flaws and three publicly disclosed zero-days.
Riepilogo fornitore: Microsoft
Part of the PlainSec briefing for 2026-06-09