Bản vá Windows Defender 0-day có thể khiến ổ cứng đầy
Microsoft phát hành bản vá vào thứ Tư để sửa lỗ hổng zero-day trong công cụ bảo mật Defender, nhưng theo nhà nghiên cứu phát hiện ra, bản vá này có thể khiến máy Windows ghi các tệp lớn đủ để lấp đầy toàn bộ dung lượng ổ cứng. Lỗ hổng được theo dõi là CVE-2026-50656 (RoguePlanet) đã được công bố vào tháng 6 bởi nhà nghiên cứu NightmareEclipse cùng với mã khai thác.
A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows machines to write files large enough to completely consume available disk space, the researcher who discovered the flaw said. RoguePlanet, tracked as CVE-2026-50656, came to public notice in June when NightmareEclipse, the pseudonymous name used by a researcher, disclosed it along with code for exploiting it. The vulnerability allows remote attackers to gain administrative control of Windows 10 and Windows 11 machines, even when real-time protection has been disabled. Over the past few months, the anonymous researcher has published a handful of other zero-days that have sent Microsoft scrambling to develop patches. Writing files of unlimited size Microsoft said Wednesday that it patched RoguePlanet with an update to the Microsoft Malware Protection Engine, which is used by the Defender antivirus app. The fix will automatically be downloaded and installed without users having to take any action. Wednesday’s update also includes “defense-in-depth updates to help improve security-related features.” Read full article Comments