
Windows zero-day SignDrop lets ordinary users gain System rights
A researcher known as Nightmare Eclipse has published a Windows zero-day called SignDrop that escalates local privileges to System by abusing the Common Log File System and Windows Defender. The flaw reportedly affects some Windows 11 26H2 and Windows Server 2025 systems.