mediumZero-Day
Proof-of-Concept Released for Privilege Escalation Flaw in CrowdStrike Falcon Sensor
A proof-of-concept named FalconFlank has been publicly disclosed, allegedly demonstrating a privilege escalation vulnerability in CrowdStrike Falcon Sensor. The researcher, known as Chaotic Eclipse, claims the flaw abuses the office malicious macros remediation feature within the sensor. As of the disclosure date, CrowdStrike has not released an official patch, and no independent verification of active exploitation or a CVE assignment has been confirmed.
The Hacker News1 min read