Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver.

The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/11/new-signdrop-zero-day-exploit-turns.html