Topic: google project zero

May 20, 2026

MiniPlasma Windows 0-Day Elevates Privileges to SYSTEM on Patched Systems

A security researcher has released a proof-of-concept exploit for the "MiniPlasma" zero-day vulnerability in the Windows Cloud Files Mini Filter Driver, which can elevate privileges to SYSTEM on fully patched systems. Originally reported to Microsoft in September 2020 and thought patched in Decem...

Windows MiniPlasma zero-day exploit grants full SYSTEM access, PoC out

A security researcher released a working "MiniPlasma" exploit for a Windows zero-day in the Cloud Filter driver (cldflt.sys), granting SYSTEM-level access on fully patched Windows 11 systems. The exploit abuses an unpatched flaw originally reported in 2020 (CVE-2020-17103), allowing arbitrary reg...

Google adds Rust to Pixel 10 modem for security

Google is fundamentally redesigning the Pixel 10's modem security, integrating a new Rust-based component into the firmware to address demonstrated remote code execution threats. Cellular modems are a persistent attack surface due to their legacy, memory-unsafe C/C++ code, which is difficult to p...