Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Researcher Chaotic Eclipse released FalconFlank, a PoC zero-day privilege escalation exploit against CrowdStrike Falcon's Microsoft Office macro removal feature.
72
Organization
Chaotic Eclipse
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 12, 2026
- Last mentionedSep 9, 2026
Timeline
4 articles · newest firstResearcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
Researcher Chaotic Eclipse released FalconFlank, a zero-day privilege escalation PoC abusing CrowdStrike Falcon's Office macro remediation; CrowdStrike is investigating and issued a tech alert.
58
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Researcher Chaotic Eclipse released ShieldBreak PoC, a claimed patch bypass for Microsoft Defender flaw CVE-2026-50656, now tracked as CVE-2026-69414.
62
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch
Researcher Chaotic Eclipse published a PoC bypassing Microsoft's CVE-2026-50656 Defender patch, enabling SYSTEM-level code execution on fully patched Windows systems.
58
Related CVEs
by mentions- CVE-2026-5065611%7.0Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet "
- CVE-2026-694141%7.8Local Elevation of Privilege in Microsoft Defender Malware Protection Engine
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-628323%7.8Local Privilege Escalation via Link Following in Windows User Profile Service
- CVE-2026-72971<1%5.5Local Tampering via Link-Following Flaw in Windows 11 26H1 Container Isolation Driver
Appears with
- Microsoftvendor · 4
- Windows 11product · 3
- Microsoft Defenderproduct · 3
- Windows Server 2025product · 3
- Avast Antivirusproduct · 2
- CrowdStrikevendor · 2
- Avastvendor · 2
- Gen Digitalvendor · 2
- CrowdStrike Falconproduct · 2
- Kasperskyvendor · 2
- Kevin Beaumontorganization · 1
- CrowdStrike Falcon Sensorproduct · 1
- The Hacker Newsvendor · 1
- Kaspersky Endpoint Securityproduct · 1
- NVIDIAvendor · 1
- LevelBluevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.