#4
The Hacker News
general
May 18, 2026 at 04:59 UTC
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
By [email protected] (The Hacker News)
AI Summary
Researcher 'Chaotic Eclipse' released a proof-of-concept exploit dubbed MiniPlasma targeting a zero-day in Windows' Cloud Files Mini Filter Driver (cldflt.sys), enabling SYSTEM-level privilege escalation on fully patched Windows systems. This follows two prior disclosures from the same researcher — YellowKey (BitLocker bypass) and GreenPlasma — forming a cluster of unpatched Windows privilege escalation issues. No patch is currently available, making this an active risk for enterprise Windows environments.
Relevance score: 87.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →