BlueHammer windows Zero-Day

On April 3rd, 2026 a security researcher operating under the alias "Chaotic Eclipse" dropped a fully functional Windows local privilege escalation exploit on GitHub. No coordinated disclosure, no CVE and no patch were provided. The exploit is a zero-day privilege escalation that allow attackers to read sam database and spawn a SYSTEM-level shell.