Microsoft has patched RoguePlanet, a race condition in the Defender scanning engine that let any local user spawn a SYSTEM shell on fully patched Windows. The fix ships through the definition channel, not Patch Tuesday – which is exactly why you should verify it actually landed on your fleet.