# Researcher releases SignDrop exploit claiming Windows SYSTEM access

_Published Thursday, November 12, 2026 at 11:40 AM EST · Security · Latest · Tier 2 — Notable_

![Researcher releases SignDrop exploit claiming Windows SYSTEM access — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/12/0_Windows-headpic.jpg)

Security researcher Abdelhamid Naceri released SignDrop, a Windows zero-day exploit he says can give attackers SYSTEM privileges and bypass antivirus tamper protection, BleepingComputer reported. The flaw concerns authentication-file creation in the Common Log File System driver, exploiting logic introduced with Microsoft's October 2025 security mitigation.

Naceri says a privileged process can be induced to open a log file, causing an authentication file to be created with SYSTEM privileges but the original file's access permissions. He tested the exploit on Windows 11 26H2 and experimental Windows builds. He says no fix is currently available and warns that disabling the mitigation would expose devices to other attacks.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/new-windows-signdrop-zero-day-gives-hackers-system-privileges/)

---
Canonical: https://techandbusiness.org/newswire/UFdXA8exUwyfofR1NhDMKZ
Published: 2026-11-12T16:40:54.431Z
Story chronology: 2026-11-12T16:04:00.000Z
Retrieved: 2026-11-12T19:02:26.739Z
Publisher: Tech & Business (techandbusiness.org)