Disgruntled researcher's Windows zero-day exploit grants attackers SYSTEM rights

A researcher frustrated with the company released a previously unknown Windows vulnerability, dubbed "SignDrop," publicly online. The exploit allows local users to escalate their privileges to SYSTEM, the highest-level access on a Windows machine. Because the flaw is a zero-day, it had no available patch at the time of disclosure, leaving affected systems exposed. The article reports the disclosure and the risk it poses to users who share a machine or have already gained limited access.