Появился новый 0-day-эксплоит ShieldCrash для повышения привилегий через Microsoft Defender

Security researcher Nightmare Eclipse has published a proof-of-concept exploit named ShieldCrash that targets a zero-day flaw in Microsoft Defender. This new technique allows attackers to read arbitrary files with SYSTEM privileges by circumventing the recent patch for the ShieldBreak vulnerability (CVE-2026-69414). Although Microsoft released version 1.1.26080.3 of the Malware Protection Engine last week, the update was found to be incomplete, leaving the underlying issue partially exposed. The exploit currently functions on fully updated instances of Windows 10, Windows 11, and Windows Server, though it does not yet enable arbitrary file writes or full shell access.