Back to Feed
Zero-daySep 9, 2026

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

Microsoft Defender zero-day 'ShieldCrash' grants SYSTEM access post-September 2026 updates.

Summary

A new Microsoft Defender zero-day exploit, dubbed 'ShieldCrash,' has been publicly released by an anonymous researcher named Nightmare Eclipse. This exploit grants SYSTEM-level access and was disclosed shortly after Microsoft's September 2026 Patch Tuesday updates, suggesting it may bypass some of those patches.

Entities

Microsoft Defender (product)Microsoft (vendor)Nightmare Eclipse (threat_actor)