[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXM_FGQdUCuK7F4bdqX-FPy1zTOTxizcHYPqItz6JoV8":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"06c6122b-f451-4769-9656-acbab473baa4","Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits","nightmare-eclipse-drops-crowdstrike-nvidia-avast-zero-day-exploits-15087a","The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges. The post Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits appeared first on SecurityWeek.","Security researcher Nightmare Eclipse has released three zero-day exploits targeting Avast, CrowdStrike, and Nvidia. The exploits, named PrettyPrague, FalconFlank, and GreenSection, allow for privilege escalation, potentially granting attackers full system privileges or enabling cross-user compromise. Avast and CrowdStrike have acknowledged the vulnerabilities and are investigating, while Nvidia has not yet responded.","Nightmare Eclipse drops three zero-day exploits targeting Avast, CrowdStrike, and Nvidia products.","https:\u002F\u002Fwww.securityweek.com\u002Fnightmare-eclipse-drops-crowdstrike-nvidia-avast-zero-day-exploits\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F10\u002FZero-Day-Exploit.jpg","2026-09-07T12:15:57+00:00","2026-09-07T14:00:10.388156+00:00",9,[17,20,23,26,28,30],{"name":18,"type":19},"Nightmare Eclipse","threat_actor",{"name":21,"type":22},"Avast Antivirus","product",{"name":24,"type":25},"GenDigital","vendor",{"name":27,"type":22},"CrowdStrike Falcon Sensor",{"name":29,"type":25},"CrowdStrike",{"name":31,"type":22},"Nvidia user-mode components","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":32,"icon":34,"name":35,"slug":36},null,"Zero-day","zero-day",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[29,24,21],{"controls":58,"vendors":145},[59,88,116],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,101,108],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":89,"product_name":105,"url":106,"description":107},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":117,"name":118,"problem":119,"products":120},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[146],{"slug":147,"name":29,"logo_path":148,"roles":149},"crowdstrike","\u002Fvendor-logos\u002Fcrowdstrike.png",[150],"affected",{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":166},"zero-day-exploits-target-crowdstrike-nvidia-and-avast-with-privilege-escalation-risks","Zero-Day Exploits Target CrowdStrike, Nvidia, and Avast with Privilege Escalation Risks","Security researcher Nightmare Eclipse publicly released three zero-day exploits — PrettyPrague, FalconFlank, and GreenSection — targeting widely deployed security and driver software from Avast, CrowdStrike, and Nvidia. The vulnerabilities enable privilege escalation, meaning attackers could gain full system control or compromise other users on the same machine. This is particularly alarming given that CrowdStrike and Avast are security tools themselves, creating an ironic attack surface within the very software meant to defend systems. Public release of unpatched exploits dramatically shrinks the window organizations have to respond before threat actors weaponize them. The lack of response from Nvidia compounds the risk, leaving users of its drivers without official guidance or remediation.",[156,157,158,159,160,161,162,163,164,165],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 8: Audit Log Management","NIST SP 800-40: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST AC-6: Least Privilege","NIST IR-4: Incident Handling","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL: Problem Management (Zero-Day Response)","MITRE ATT&CK: T1068 - Exploitation for Privilege Escalation",{}]