Cve-2020-17103

vulnerabilities 2026-05-18
MiniPlasma: Public PoC Hands SYSTEM on Fully Patched Windows 11 via cldflt.sys
Chaotic Eclipse published a working PoC for MiniPlasma, a Cloud Filter driver LPE that abuses CfAbortHydration to forge .DEFAULT-hive registry keys — the same bug Microsoft was told about in 2020 and claimed to have fixed.
windows zero-day privilege-escalation lpe cldflt cve-2020-17103 poc

MiniPlasma: Public PoC Hands SYSTEM on Fully Patched Windows 11 via cldflt.sys