A patch Microsoft launched on Wednesday to repair a zero-day vulnerability in its Defender safety engine could trigger Home windows machines to put in writing recordsdata giant sufficient to utterly devour obtainable disk area, the researcher who found the flaw stated.
RoguePlanet, tracked as CVE-2026-50656, got here to public discover in June when NightmareEclipse, the pseudonymous identify utilized by a researcher, disclosed it together with code for exploiting it. The vulnerability permits distant attackers to achieve administrative management of Home windows 10 and Home windows 11 machines, even when real-time safety has been disabled. Over the previous few months, the nameless researcher has revealed a handful of different zero-days which have despatched Microsoft scrambling to develop patches.
Writing recordsdata of limitless dimension
Microsoft stated Wednesday that it patched RoguePlanet with an replace to the Microsoft Malware Safety Engine, which is utilized by the Defender antivirus app. The repair will robotically be downloaded and put in with out customers having to take any motion. Wednesday’s replace additionally contains “defense-in-depth updates to assist enhance security-related options.”
