Microsoft Patches RoguePlanet Zero-Day in Defender

Microsoft has released a patch that closes a zero-day vulnerability in Microsoft Defender, designated RoguePlanet.

Information about the vulnerability came to light only after the June 2026 security update package had shipped — that is, after the scheduled “Patch Tuesday.” This means that at the time the issue was disclosed, the update current at that point did not yet contain a fix.

What is known

The published material does not disclose details about the nature of the vulnerability, its technical workings, or any possible instances of exploitation in real-world attacks. The company limited itself to releasing a fix and assigning the vulnerability the name RoguePlanet.

Defender remains one of the key defensive components in the Windows ecosystem, so vulnerabilities in it have traditionally drawn heightened attention — both from security researchers and from attackers.

Recommendations

Users and administrators should make sure that the latest available update, which closes this vulnerability, is installed on their systems. As with any zero-day issue, a delay in installing the patch increases the risk of a system compromise.

Microsoft traditionally recommends enabling automatic installation of updates for the Defender product line and keeping an eye on notifications about new security fixes.

Source: Bleeping Computer