clfs

Windows 11 26H2 zero-day SignDrop abuses Microsoft’s own security fix to grant SYSTEM access

SignDrop is a Windows 11 26H2 zero-day that abuses Microsoft’s own CLFS log authentication to escalate from standard user to SYSTEM — no admin rights needed. Public PoC. No patch. Fix expected December 8.