A new Microsoft Defender zero-day called ‘RoguePlanet’ lets attackers gain SYSTEM privileges on fully patched Windows 10 and 11 machines. The race condition exploit published by researcher Nightmare Eclipse works against June 2026 Patch Tuesday systems — and there’s no fix yet.
Microsoft’s latest Patch Tuesday fixed a zero-day vulnerability disclosed by researcher Nightmare Eclipse, as the two remain locked in a heated public dispute over responsible disclosure practices. The same patch bundle also addressed another flaw originally thought fixed six years ago.