Chaotic Eclipse Released ShieldCrash, a PoC Exploiting a Microsoft Defender Zero-Day Vulnerability
Security researcher Chaotic Eclipse released a proof of concept (PoC) named ShieldCrash that, according to the researcher, exploits a remaining condition in Microsoft Defender’s Malware Protection Engine related to the ShieldBreak vulnerability (CVE-2026-69414). The PoC reportedly enables arbitrary file reads with SYSTEM privileges. The source states that all supported Windows versions remain vulnerable even after the September 2026 security updates.
CERT24