Home / May 19, 2026 / Story
0
#4 The Hacker News general May 18, 2026 at 04:59 UTC

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

By [email protected] (The Hacker News)

AI Summary

Researcher 'Chaotic Eclipse' released a proof-of-concept exploit dubbed MiniPlasma targeting a zero-day in Windows' Cloud Files Mini Filter Driver (cldflt.sys), enabling SYSTEM-level privilege escalation on fully patched Windows systems. This follows two prior disclosures from the same researcher — YellowKey (BitLocker bypass) and GreenPlasma — forming a cluster of unpatched Windows privilege escalation issues. No patch is currently available, making this an active risk for enterprise Windows environments.

Relevance score: 87.0/100

# More from May 19