VirtualDisk

RoguePlanet — Windows Defender LPE via ISO Mount + Task Scheduler Race Condition

RoguePlanet is a local privilege escalation exploit for Windows 10 and 11 that abuses a race condition in Windows Defender's scan pipeline. The exploit mounts an attacker-controlled ISO image via the VirtualDisk API, plants an EICAR-like trigger file inside…