This is a zero-day bug being exploited so Microsoft has not patched the issue yet. Admins need to be on the lookout for a fix from Microsoft and apply it ASAP.

The PoC posted by Nightmare Eclipse, who has been feuding with Microsoft for months, enables an attacker with any level of access to gain system-level privileges.

The PoC posted by Nightmare Eclipse, who has been feuding with Microsoft for months, grants an attacker system-level privileges once they gain any access.