CERT24Windows vulnerability reported to Microsoft in 2020 remains activeLoading data…
CERT24Threat Observatory
Period

Windows vulnerability reported to Microsoft in 2020 remains active

A cybersecurity researcher known as Chaotic Eclipse, or Nightmare Eclipse, released a proof of concept (PoC) for a Windows local privilege escalation vulnerability dubbed MiniPlasma, including source code and a compiled executable. The researcher claims that the issue reported to Microsoft in 2020 and tracked as CVE-2020-17103 remains unpatched or exploitable again. BleepingComputer reported obtaining a SYSTEM-privileged command prompt from a standard user account on a fully patched Windows 11 Pro system. The source does not confirm that MiniPlasma has been used in attacks.

← Back to intelligence

Windows vulnerability reported to Microsoft in 2020 remains active

A cybersecurity researcher known as Chaotic Eclipse, or Nightmare Eclipse, released a proof of concept (PoC) for a Windows local privilege escalation vulnerability dubbed MiniPlasma, including source code and a compiled executable. The researcher claims that the issue reported to Microsoft in 2020 and tracked as CVE-2020-17103 remains unpatched or exploitable again. BleepingComputer reported obtaining a SYSTEM-privileged command prompt from a standard user account on a fully patched Windows 11 Pro system. The source does not confirm that MiniPlasma has been used in attacks.