Microsoft has released an automatic security update for Windows Defender to patch the critical RoguePlanet zero-day vulnerability, identified as CVE-2026-50656, which previously allowed unauthorized full system access.

Key Points

• Microsoft issued a patch for the RoguePlanet zero-day vulnerability, officially tracked as CVE-2026-50656.
• The flaw allowed attackers to gain complete control over affected Windows systems through the Malware Protection Engine.
• Security researcher Nightmare Eclipse discovered the vulnerability and reported it alongside several other Windows security flaws.
• Users receive the fix automatically through the standard Windows Update process without requiring manual intervention.
• Microsoft confirmed the update is now active and advises users to verify their Malware Protection Engine version.

Why it Matters

This update is essential for maintaining system integrity, as the vulnerability posed a significant risk of unauthorized remote access and potential data compromise. Ensuring the latest security patches are installed remains the primary defense against evolving threats targeting core Windows components.