‘I didn’t bluff Microsoft and I’m doing it again’: apparently disgruntled researcher leaks worrying Windows zero-day security flaw

• Researchers leaked BlueHammer Windows exploit code
• Flaw enables local privilege escalation to SYSTEM
• Microsoft calls for coordinated disclosure, exploit reliability uncertain

A security researcher apparently unhappy with how Microsoft handles vulnerability disclosures has apparently decided to leak the exploit code for a zero-day flaw in the Windows operating system (OS).

In a short post published on their Blogspot page, someone with the alias Chaotic Eclipse leaked the code for a flaw called BlueHammer, a privilege escalation flaw that allows local attackers to gain SYSTEM or elevated admin permissions on the measurement endpoint.