Microsoft has identified an elevation of privilege in the Microsoft Malware Protection Engine, which is part of Microsoft Defender, publicly referred to as RoguePlanet. The vulnerability may allow an attacker to gain higher privileges on a Windows system. This issue is associated with CWE-59. The public description does not specify the attack conditions, but given the nature of the engine it is inferred that exploitation would likely require local or pre-existing system access.

The flaw affects the Microsoft Malware Protection Engine, which is the primary component of Microsoft Defender on Windows platforms. No particular version numbers are listed, implying that all current releases of the engine may be impacted until a vendor patch is issued.

With a CVSS score of 7.8, the vulnerability is rated as high severity, and the EPSS score of 11% indicates a moderate probability of exploitation. The flaw is not listed in the CISA KEV catalog. Because the reported information does not provide a clear attack vector, the likely scenario involves local or pre-existing system access; remote exploitation is not confirmed.