Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

A prolific zero-day researcher known as Nightmare Eclipse published PoC exploits for multiple endpoint/security products, including a CrowdStrike Falcon privilege-escalation bypass (FalconFlank) that abuses the Microsoft Office suspicious-macro removal feature, as well as PoCs for Kaspersky (HardBreacher), Avast (PrettyPrague) and an Nvidia memory-corruption bug; vendors have begun investigations and some fixes or mitigations are referenced.