CERT24New Windows SignDrop zero-day gives attackers SYSTEM privilegesLoading data…
CERT24Threat Observatory
Period

New Windows SignDrop zero-day gives attackers SYSTEM privileges

Security researcher Abdelhamid Naceri disclosed a Windows zero-day exploit called SignDrop that may allow attackers to gain SYSTEM privileges. The flaw targets a CLFS mitigation Microsoft introduced in October 2025 to defend against authentication attacks.

← Back to intelligence

New Windows SignDrop zero-day gives attackers SYSTEM privileges

Security researcher Abdelhamid Naceri disclosed a Windows zero-day exploit called SignDrop that may allow attackers to gain SYSTEM privileges. The flaw targets a CLFS mitigation Microsoft introduced in October 2025 to defend against authentication attacks.