Zero-daySep 9, 2026
New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access
Microsoft Defender zero-day 'ShieldCrash' grants SYSTEM access post-September 2026 updates.
Summary
A new Microsoft Defender zero-day exploit, dubbed 'ShieldCrash,' has been publicly released by an anonymous researcher named Nightmare Eclipse. This exploit grants SYSTEM-level access and was disclosed shortly after Microsoft's September 2026 Patch Tuesday updates, suggesting it may bypass some of those patches.
Entities
Microsoft Defender (product)Microsoft (vendor)Nightmare Eclipse (threat_actor)