CERT24New Windows SignDrop zero-day may give attackers SYSTEM privilegesLoading data…
CERT24Threat Observatory
Period

New Windows SignDrop zero-day may give attackers SYSTEM privileges

Security researcher Abdelhamid Naceri, also known as Nightmare Eclipse, disclosed a Windows zero-day exploit named SignDrop. According to the source, it may allow attackers to gain SYSTEM privileges. Naceri tested it on Windows 11 26H2, Windows 11 26H2 Experimental, and Windows Server 2025 Experimental, and estimated that 80% of Windows installations may be vulnerable.

← Back to intelligence

New Windows SignDrop zero-day may give attackers SYSTEM privileges

Security researcher Abdelhamid Naceri, also known as Nightmare Eclipse, disclosed a Windows zero-day exploit named SignDrop. According to the source, it may allow attackers to gain SYSTEM privileges. Naceri tested it on Windows 11 26H2, Windows 11 26H2 Experimental, and Windows Server 2025 Experimental, and estimated that 80% of Windows installations may be vulnerable.