New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

An anonymous researcher using the "Nightmare Eclipse" handle published a CrowdStrike Falcon zero-day named "FalconFlank" that enables local privilege escalation to SYSTEM by abusing CrowdStrike Falcon's Office malicious macros remediation on fully-patched Windows 11 and Windows Server systems; CrowdStrike is investigating and has advised disabling the Microsoft Office File Suspicious Macro Removal policy while providing a private tech alert. The report also notes multiple other zero-days the researcher released against Kaspersky, Avast, Nvidia, and various Microsoft components, some already patched and others still active.