Reported by 3 outlets
Windows 10 KB5122878 and Windows 11 KB5124008 & KB5122880 security updates and Microsoft Defender ShieldCrash SYSTEM access zero-day
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.10 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.51 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Windows 10 KB5122878 and Windows 11 KB5124008 & KB5122880 security updates and Microsoft Defender ShieldCrash SYSTEM access zero-day
malware.news · 33d ago · September 10th, 2026
Microsoft has released security updates for Windows 10 (KB5122878) and Windows 11 (KB5124008 & KB5122880). This regular Patch Tuesday update addresses 966 vulnerabilities and 2 zero-days, including a Microsoft Defender ShieldCrash zero-day granting SYSTEM-level access.
Article Link: Windows 10 KB5122878, Windows 11 KB5124008 & KB5122880 security updates and Microsoft Defender ShieldCrash SYSTEM access privilege escalation zero-day
-
update from securityweek.com
‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
securityweek.com · 33d ago · September 10th, 2026
The security researcher known as Nightmare Eclipse has released another Microsoft Defender zero-day exploit, right after Microsoft’s record-breaking September 2026 patches . Dubbed ‘ ShieldCrash ’, the exploit targets fully patched Windows systems for privilege escalation. The proof-of-concept (PoC) exploit code demonstrates an arbitrary file read with System privileges, according to Nightmare Eclipse, also known as Chaotic Eclipse, Infinite Nightmare, and MSNightmare. However, the underlying vulnerability can be exploited to gain full System privileges, allowing attackers to drop the SAM database, the researcher says. Nightmare Eclipse also notes that the fresh zero-day is a bypass for ShieldBreak , the Microsoft Defender privilege escalation exploit dropped on the August 2026 Patch Tuesday. ShieldBreak in turn was released as a bypass for Microsoft’s patches against RoguePlanet, a race condition bug dropped as a zero-day on June 2026 Patch Tuesday. Microsoft patched RoguePlanet (CVE-2026-50656) on July 19. It acknowledged ShieldBreak on August 14 and rolled out fixes for it on September 3. The bug is tracked as CVE-2026-69414 . SecurityWeek has emailed Microsoft for a statement on the fresh zero-day exploit and will update this article if the company responds.
-
update from www.computerbase.de
Patch cracked by the patch: Microsoft Defender again has a zero-day problem https://www. computerbase.de/news/apps/patc h-vom-patch-geknack
www.computerbase.de · 32d ago · September 11th, 2026
Patch cracked by the patch: Microsoft Defender again has a zero-day problem https://www. computerbase.de/news/apps/patc h-vom-patch-geknack
via Mastodon https://www.computerbase.de/news/apps/patch-vom-patch-geknackt-microsoft-defender-hat-erneut-ein-zero-day-problem.99355/