Zero-day exploit bypasses Windows security fix

Security researcher Abdelhamid Naceri disclosed a zero-day exploit named SignDrop on November 10 that allegedly allows standard users to gain SYSTEM privileges by abusing Windows Common Log File System authentication. The researcher estimates around 80% of Windows installations could be vulnerable, though independent testing suggests the exploit lacks reliability for operational use as of November 16.