CrowdStrike 'FalconFlank' zero-day enables SYSTEM privilege escalation An exploit dubbed FalconFlank was released by the researcher Nightmare Eclipse, targeting CrowdStrike Falcon on fully updated Windows 11 25H2 and Windows Server 2025 systems. The flaw reportedly abuses Falcon's Office malicious macros remediation path to spawn a command prompt with SYSTEM privileges.

https://www.bleepingcomputer.com/news/security/new-crowdstrike-falconflank-zero-day-grants-system-privileges/