Experts published unpatched Windows zero-day BlueHammer

## Executive summary The report details the public disclosure of "BlueHammer," an unpatched Windows zero-day local privilege escalation (LPE) combining TOCTOU and path confusion, whose GitHub proof-of-concept (published by the researcher "Nightmare-Eclipse") can allow local attackers to access the SAM database and escalate to SYSTEM; Microsoft has not released a patch and the disclosure followed a dispute over MSRC handling of the report.