Microsoft’s nemesis drops new zero-day privilege escalation vulnerability — attack grants system-level privileges, but it could already be patched