Microsoft says it is working on a fix for ShieldBreak, a publicly disclosed Microsoft Defender flaw that can let a low-privilege user gain full SYSTEM control on affected Windows systems. The issue is now tracked as CVE-2026-69414 in the Microsoft Malware Protection Engine used by Microsoft Defender. Researcher Nightmare Eclipse says it bypasses the earlier RoguePlanet fix, and public proof-of-concept code reportedly works on fully patched Windows 10, Windows 11, and Windows Server systems when Defender is enabled.
2026.09.22
78% relevant
This is another Microsoft Defender zero-day from the same researcher campaign, adding a new technique, BigDiskBuster, that does not disable Defender outright but keeps it from receiving updates, leaving protections outdated while the tool runs.
2026.09.09
82% relevant
This article adds that the same researcher has now published ShieldCrash, a claimed bypass of the ShieldBreak fix, extending the ShieldBreak exploit chain against Microsoft Defender on patched Windows systems.
info@thehackernews.com (The Hacker News)
2026.09.09
95% relevant
This appears to directly update the same ShieldBreak event by adding that a researcher published a new proof of concept showing Microsoft’s patch or mitigation can be bypassed, materially changing defender urgency and remediation confidence for CVE-2026-69414 in Microsoft Defender.
Ionut Arghire
2026.08.21
28% relevant
This article briefly updates the ShieldBreak story by noting Microsoft is still working on a fix for the publicly disclosed Defender elevation-of-privilege zero-day now tracked as CVE-2026-69414, but the article's main focus is a separate batch of 22 fresh Microsoft patches.
Sergiu Gatlan
2026.08.17
100% relevant
This article establishes a distinct tracked event by adding Microsoft's confirmation, a CVE assignment, and patch-in-development status for the ShieldBreak Defender zero-day.