Zero-Day vulnerability "MiniPlasma" found on Windows 11

A Zero-Day vulnerability "MiniPlasma" has been detected on Windows 11 under System privilege grade without permission.

According to a report by The Hacker News website, a vulnerability called MiniPlasma has been detected, a vulnerability that occurs in the driver part of the Windows Cloud Files Mini Filter with the file name "cldflt.sys." The vulnerability is located within a Routine called "HsmOsBlockPlaceholderAccess." This vulnerability allows hackers to upgrade their Privilege Escalation to the highest level, or SYSTEM. The vulnerability was previously detected by researchers from Google Project Zero and reported to Microsoft during September. 2020, and Microsoft has successfully issued a patch in December of the same year, counting the vulnerability as part of the CVE-2020-17103 code security vulnerability.

The independent cyber team Chaotic Eclipse, which has detected two other Privilege Escalation vulnerabilities - YellowKey and GreenPlasma - said that although Microsoft has announced that the vulnerability has been patched successfully, the investigation found that all the same problems remain and that researchers are currently able to use it, so that they are not sure if Microsoft has actually issued the patch or if the patch has been issued after some problems have caused a roll-back that leads to the return of the vulnerability. It has revealed that all current versions of Windows are all vulnerable to all MiniPlasma vulnerabilities.

In addition, another cyber researcher, Will Dormann, said that the MiniPlasma vulnerability is so "reliable" that it allows him to access "cmd.exe" with SYSTEM permissions, but at the same time said that he is no longer able to use it on the latest version of Windows 11, Preview Canary, so it is expected that Microsoft has solved this problem successfully.

# Trending # Lemon 8 Howtoo # lemon 8 diary # zeroday # freedomhack