New Windows ‘MiniPlasma’ Zero-Day Let Attackers Gain SYSTEM Access – PoC Released

A public proof-of-concept exploit named "MiniPlasma" was released that weaponizes a long-known flaw (CVE-2020-17103) in the Windows Cloud Filter driver (cldflt.sys) to achieve SYSTEM-level privileges via a race condition; the PoC reportedly succeeds on fully patched Windows systems across versions and affects cloud-sync components like OneDrive, increasing urgency for Microsoft patches and mitigations.