AUTO-UPDATED
Cybersecurity

Microsoft’s fix for RoguePlanet has its own new disk space bug

By Source PCWorld Published

A recent Microsoft security patch intended to fix the RoguePlanet vulnerability in Windows Defender has inadvertently introduced a new flaw that allows attackers to exhaust system disk space.

Key Points

  • Cybersecurity researcher Nightmare-Eclipse discovered that the patch causes Windows Defender to cache excessively large files locally.
  • The vulnerability affects users running Windows 11 25H2 and Windows Server 2025.
  • A proof-of-concept exploit demonstrates that visiting a malicious SMB server can trigger the disk space exhaustion issue.
  • Microsoft has not yet issued a formal comment or a secondary patch to address this specific defect.

Why it Matters

This flaw creates a significant denial-of-service risk by allowing remote actors to fill a system's storage capacity through a simple network interaction. The situation highlights the ongoing challenges companies face when deploying security updates that inadvertently compromise system stability or performance.
PCWorld Published by Mikael Markander
Read original

Related Articles

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Cybersecurity Internet

Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

Cybersecurity Slcyber.io

Sign Commits from Anywhere Without Your Keys Going Anywhere

Cybersecurity Haacked.com

A password alone isn't enough: How to really secure your accounts

Cybersecurity Notebookcheck.net