FalconFlank Zero-Day Privilege Escalation Vulnerability Disclosed in CrowdStrike Falcon

Security researcher Chaotic Eclipse (also known as INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) disclosed a zero-day privilege escalation vulnerability named FalconFlank affecting CrowdStrike Falcon. The flaw exploits the Office malicious macros remediation feature in the CrowdStrike Falcon Sensor. The proof-of-concept (PoC) was published on GitHub, as noted in the README file.