Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
| Vendor | Product | Versions |
|---|---|---|
| microsoft | malware_protection_engine | 1.1.0.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| microsoft | microsoft defender | cert_advisory | 90% |
| microsoft | microsoft malware protection | cert_advisory | 90% |
Updated description with technical details about the RoguePlanet vulnerability and added Windows 11 26H2 as an affected version.
Updated description with new technical details and changed severity from HIGH to CRITICAL.
Updated description with technical details about improper link resolution and added affected versions for Windows 10 and Windows 11.
Updated description with technical details about the vulnerability and added new tag 'Chaotic Eclipse'.
Updated affected versions to include 1.1.26060.3008 and specified the patch available version.
Updated description with technical details about the vulnerability and added CWE-22.
Added affected versions for Windows 10 and Windows 11, provided a more detailed description of the vulnerability, and included a new tag 'Nightmare Eclipse'.
Added a description detailing the vulnerability as 'RoguePlanet', marked exploit availability and active exploitation as true, and added a new tag.
Initial creation
