Reported by 1 outlet
Windows MiniPlasma zero-day gives SYSTEM on fully patched Windows 11 — PoC released
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 4.20 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Windows MiniPlasma zero-day gives SYSTEM on fully patched Windows 11 — PoC released
bleepingcomputer.com · 149d ago · May 18th, 2026
Researcher "Chaotic Eclipse" has published a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed MiniPlasma that grants SYSTEM privileges on fully patched Windows 11 systems. The flaw targets the
cldflt.sysCloud Filter driver — specifically a routine originally reported by Google Project Zero's James Forshaw in September 2020 (CVE-2020-17103, marked fixed in December 2020). The researcher claims Microsoft never actually patched the issue or the patch was silently rolled back. BleepingComputer confirmed the exploit works on a fully patched Windows 11 system running the latest May 2026 Patch Tuesday updates. This is the latest in Chaotic Eclipse's disclosure spree following BlueHammer, RedSun, YellowKey (BitLocker bypass), and GreenPlasma — several of which were exploited in the wild within days of publication.