A new Microsoft Defender zero-day called ‘RoguePlanet’ lets attackers gain SYSTEM privileges on fully patched Windows 10 and 11 machines. The race condition exploit published by researcher Nightmare Eclipse works against June 2026 Patch Tuesday systems — and there’s no fix yet.
A single-character typo in the Linux kernel’s nf_tables code (CVE-2026-23111) turns any unprivileged local account into root — and working exploits are now public. Full technical write-ups from Exodus Intelligence and FuzzingLabs detail Debian, Ubuntu, and RHEL exploitation paths.