Microsoft addresses zero-day exploits leaked by researcher in June update (opens in new tab)

Microsoft released security updates in June 2026 to address several zero-day vulnerabilities previously disclosed by a researcher known as Nightmare Eclipse. The patches resolve two privilege escalation flaws, dubbed GreenPlasma and MiniPlasma, which allow attackers to gain SYSTEM-level access on Windows systems. These vulnerabilities reside in the Collaborative Translation Framework and the Cloud Files Mini Filter Driver, respectively. <a href="