Microsoft Updates Windows Malware Protection Engine for RoguePlanet Vulnerability (heise.de)

• Microsoft updates Windows Malware Protection Engine for RoguePlanet (CVE-2026-50656).
• Initial patch from June 10 was bypassable; new engine version 1.1.26060.3008 fixes flaw.
• Vulnerability grants system privileges on Windows 10/11; researcher Nightmare Eclipse disclosed multiple zero-days.

"On July 8, 2026, Microsoft updated the Windows Malware Protection Engine to better address the RoguePlanet vulnerability (CVE-2026-50656, CVSS 7.8). The initial patch from June 10, 2026, was found to be insufficient and easily bypassed. The new engine version 1.1.26060.3008 is considered secure. The flaw affects Windows 10 and 11, allowing attackers to gain system privileges."