Loading...
Market
Who will first report an attack exploiting Windows 11 driver signature bypass by Feb 28, 2025?
2
Resolution / Starting Odds
A cybersecurity firm • 25%
A government agency • 25%
A tech company • 25%
Other • 25%
Reports from credible cybersecurity firms or news outlets
Story
New Windows 11 Driver Signature Bypass Enables Kernel Rootkit Installs and VAC Kernel-Mode Bypass
Oct 26, 2024, 03:34 PM
Recent reports indicate a significant security vulnerability in Windows systems, specifically a new bypass of the Windows Driver Signature enforcement that allows for the installation of kernel rootkits. This development has raised concerns regarding the potential for local users to gain elevated privileges on Windows 11 due to a vulnerability in the Common Log File System (CLFS) driver. Additionally, there are reports of a fully functional VAC kernel-mode bypass that utilizes either SSDT hooks or Infinityhook to intercept VAC syscalls, effectively spoofing results to bypass memory integrity checks. The implications of these vulnerabilities could pose serious risks to system security and user data integrity.
View original story
Similar markets
Yes • 50%
No • 50%
Yes • 50%
No • 50%
0-10 • 25%
11-50 • 25%
51-100 • 25%
More than 100 • 25%
macOS • 33%
Linux • 33%
Both simultaneously • 33%
Yes • 50%
No • 50%
Apple • 25%
Microsoft • 25%
Third-party cybersecurity firm • 25%
No patch released • 25%
Yes • 50%
No • 50%
August 2024 Update • 25%
September 2024 Update • 25%
October 2024 Update • 25%
Later Update • 25%
Yes • 50%
No • 50%