New Windows Zero-Day Vulnerability Revealed Amid Microsoft's Lack of Patches

CoinWorld reported:

A security researcher has disclosed an exploit for a Windows zero-day vulnerability named ShieldBreak. This vulnerability involves the built-in Windows security component, Windows Defender, and if successfully exploited, allows low-privilege accounts to gain complete control over the device and its data.

Vulnerability Affects Multiple Versions
According to researcher Nightmare Eclipse, ShieldBreak can run on Windows 10, Windows 11, and Windows Server 2025, including the latest Windows 11 25H2 version. The proof-of-concept they released is published as a Windows application and requires users to actively run it to trigger the vulnerability.

Security researcher Will Dormann stated that he has verified the vulnerability's effectiveness and confirmed that one of the prerequisites for a successful attack is that the target device has Windows Defender enabled.

• Affected systems include Windows 10, Windows 11, and Windows Server 2025
• Exploit relies on Windows Defender being enabled
• The disclosed content is a proof-of-concept, not a patch

Microsoft Has Not Provided a Patch
As of TechCrunch's report, Microsoft has not released a security update for ShieldBreak. A Microsoft spokesperson did not immediately comment in response to media inquiries. Since the vendor did not complete the patch before the vulnerability details were disclosed, this issue is categorized as a zero-day vulnerability.

This disclosure occurred just one day after Microsoft's monthly routine security update, "Patch Tuesday." Reports indicate that the number of patches from Microsoft in the past two months has approached 500 vulnerabilities, showing that their current pace of fixes remains intense.

Disclosure Policy Sparks Controversy Again
Nightmare Eclipse has stated in multiple blog posts that Microsoft has inadequately handled their vulnerability reports and has communication issues, leading them to choose to disclose the relevant vulnerabilities. Some of the Windows vulnerabilities previously disclosed by this researcher have later been used in real attacks against organizations.

In May of this year, Microsoft warned that if security researchers disclose zero-day vulnerability details outside of the company's disclosure policy, they may face legal action. This statement subsequently sparked backlash in the security community, with many researchers claiming to have had similar experiences. Microsoft later retracted some of these statements, but the original blog post remains online.

Reports also mention that Microsoft is increasingly using AI to discover and clean up security flaws, which has contributed to maintaining a high number of vulnerabilities patched each month recently.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.