Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing sig...
On September 9, 2026, Nightmare Eclipse released a proof-of-concept (PoC) exploit named ShieldCrash, which allows arbitrary file reading as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems. This exploit is the third consecutive bypass of the Microsoft Malware Protection Eng...
Chaotic Eclipse released FalconFlank, a proof-of-concept exploit for a zero-day privilege escalation vulnerability in the CrowdStrike Falcon cybersecurity platform. The exploit leverages the platform's 'Microsoft Office file malicious macro removal' feature to escalate privileges from a low-privileg...
