Researcher Discloses FalconFlank Proof-of-Concept for Privilege Escalation in CrowdStrike Falcon

A researcher has disclosed a proof-of-concept (PoC) named FalconFlank that exploits a privilege escalation vulnerability in CrowdStrike Falcon, allowing unauthorized access. The researcher, known for previous disclosures like ShieldBreak and HardBreacher, has criticized vendor communication practices and hinted at future disclosures of unpatched vulnerabilities.

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

"FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor," the researcher said in a GitHub README file, adding

Read original article