Nightmare Eclipse Releases Kaspersky Exploit 'HardBreacher'

• •HardBreacher targets Kaspersky Endpoint Security on Windows 11 systems.
• •The exploit allows privilege escalation and may disrupt antivirus functionality.
• •Kaspersky claims the vulnerability has been patched via an automatic update.

A researcher known as Nightmare Eclipse has released a proof-of-concept (PoC) exploit named HardBreacher, targeting a privilege escalation vulnerability in Kaspersky Endpoint Security. This exploit affects fully patched Windows 11 systems running Kaspersky Endpoint v14.0.0.504. The PoC is described as unstable and may require multiple attempts to execute successfully. When successful, it can create a DLL file in System32 with full user permissions, potentially disrupting Kaspersky's functionality and compromising system security. Kaspersky has stated that the underlying issue has been resolved through an automatic update. However, the exploit remains unverified and has not been assigned a CVE by Kaspersky. The researcher has a history of releasing exploits after criticizing vendors' responses to vulnerability reports, raising concerns about responsible disclosure practices.