Zero-Day Local Privilege Escalation Exploit

Reported 21 Apr 2026 by otx · Severity: medium

RedSun.exe is a publicly available proof-of-concept exploit targeting a zero-day vulnerability in Microsoft Defender that enables local privilege escalation from standard user to SYSTEM-level access on Windows systems. The exploit leverages flawed Defender remediation logic for c