A newly detailed Windows privilege escalation flaw tracked as CVE-2026-66804 allowed a standard, low-privileged user to plant a malicious DLL and execute arbitrary code with full NT AUTHORITYSYSTEM ...
Microsoft-attested driver disables 145 security processes and steals passwords, crypto wallets, and browser data.