Microsoft Zero-Day Exploit
Chaotic Eclipse discloses seventh Windows zero-day, 'RoguePlanet', granting SYSTEM privileges via race-condition exploit, amid feud with Microsoft
Key points
- Chaotic Eclipse, a security researcher, disclosed a zero-day vulnerability in Windows 11, called 'RoguePlanet', just hours after Microsoft's June Patch Tuesday
- The 'RoguePlanet' bug is a race-condition vulnerability that grants attackers SYSTEM privileges on fully patched Windows 10 and Windows 11 devices
- ThreatLocker researchers confirmed the flaw works, with a video demonstration of the exploit
- Chaotic Eclipse, possibly a disgruntled ex-Microsoft employee, has disclosed seven zero-day exploits in recent months, amid accusations of Microsoft ignoring vulnerability reports
- The exploit allows local privilege escalation, leading to SYSTEM-level control over an affected machine, if the attacker wins the race condition
- Microsoft has not commented on the latest disclosure, but has previously removed Chaotic Eclipse's work from GitHub and GitLab repositories
Microsoft Zero-Day Exploit Disclosed
Chaotic Eclipse, a security researcher with a history of disclosing Windows zero-day vulnerabilities, has revealed another exploit, called 'RoguePlanet'. This bug is a race-condition vulnerability that grants attackers SYSTEM privileges on fully patched Windows 10 and Windows 11 devices.
Feud with Microsoft
The disclosure comes amid a public feud between Chaotic Eclipse and Microsoft, with the researcher accusing the company of ignoring vulnerability reports and refusing to communicate.
Impact and Confirmation
ThreatLocker researchers have confirmed the flaw works, with a video demonstration of the exploit. The 'RoguePlanet' bug allows local privilege escalation, leading to SYSTEM-level control over an affected machine, if the attacker wins the race condition.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.