A security researcher Microsoft tried to criminally prosecute published a seventh Windows zero-day exploit — timed to land within hours of June's Patch Tuesday.
The researcher, known as Chaotic Eclipse, released a proof-of-concept called RoguePlanet that grants SYSTEM-level privileges on fully patched Windows 10 and 11 machines. SYSTEM is the highest access tier Windows has; an attacker who lands it owns the box outright, no further escalation required. The release came hours after Microsoft's June Patch Tuesday update, which closed a record 200 vulnerabilities in a single batch. Microsoft had previously threatened Chaotic Eclipse with criminal prosecution — a move that, in hindsight, appears to have converted a researcher into a recurring headline.
This is the seventh zero-day Chaotic Eclipse has published, and the pattern matters more than any individual exploit. The criminal-prosecution threat was meant to silence the researcher; instead it appears to have removed whatever incentive existed for coordinated disclosure. Each new release — timed for maximum contrast with a fresh Patch Tuesday — reads less like a security warning and more like a statement. For Windows users, the practical upshot is a privilege-escalation flaw with public proof-of-concept code and no patch in sight.
Microsoft shipped the largest Patch Tuesday on record this month. The same week, a researcher it threatened in court demonstrated that a 200-fix update still leaves room for an eighth.