A researcher known as MSNightmare, also called Chaotic Eclipse, has published a working proof of concept for an unpatched Windows zero-day dubbed SignDrop. The exploit turns a standard user account into NT AUTHORITY\SYSTEM by abusing the Common Log File System (CLFS) driver, clfs.sys. It was released on GitHub on November 10, the same day as […]
Read the original article:
New Windows SignDrop Zero-Day Exploit Allows Attackers to Gain SYSTEM Privileges
