CVE-2020-17103 2

Vulnerability (CVE)

Mini Plasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

Security researcher Chaotic Eclipse released a proof-of-concept for MiniPlasma, a Windows privilege escalation zero-day in the Cloud Files Mini Filter Driver (cldflt.sys) that grants SYSTEM privileges on fully patched systems. The flaw was reported to...

Vulnerabilities & Patching

Hunting for Bugs in Windows Mini-Filter Drivers

Cyber Risks Google Project Zero

Google Project Zero's James Forshaw detailed four Windows vulnerabilities Microsoft fixed in December in the Cloud Filter and Windows Overlay Filter (WOF) drivers: CVE-2020-17103, CVE-2020-17134, CVE-2020-17136, and CVE-2020-17139, comprising three local...

Vulnerabilities & Patching