CybersecurityUpdated 1h ago

Report traces SignDrop’s SYSTEM escalation to a crafted CLFS container

Ars Technica says the exploit affects some Windows versions. With ordinary user rights, an attacker can force a privileged process such as Windows Defender to open a crafted Common Log File System (CLFS) container. The attacker then abuses privileged file creation to elevate the local account to full SYSTEM rights.

1 publisher1 report

Coverage started 1h ago