Windows SignDrop exploit exposes a local SYSTEM escalation claim
A public Windows exploit called SignDrop targets a security feature meant to stop attacks on the Common Log File System, or CLFS. It claims that a normal user account can be turned into a SYSTEM account, which is the highest level of control on Windows. The flaw has no CVE number and no patch as of November 11, 2026. Microsoft has also not confirmed the claims. SignDrop and its public…