There's a new Windows 0day LPE that has been disclosed called BlueHammer. The reporter suggests that it's being disclosed due to how MSRC operates these days.

MSRC used to be quite excellent to work with.
But to save money Microsoft fired the skilled people, leaving flowchart followers.
I wouldn't be surprised if Microsoft closed the case after the reporter refused to submit a video of the exploit, since that's apparently an MSRC requirement now. πŸ˜‚

Anyway, yeah, it works. Maybe not 100% reliably, but well enough...

@wdormann hm, so far on 0% success rate on Windows Server, grumble grumble grumble....
@nyanbinary @wdormann Probably have to upgrade from Server 2003 for it to work.
@cR0w @wdormann 2022 & 2025, still got Azure credit to burn 

@nyanbinary
WFM πŸ€·β€β™‚οΈ

Though on the Server platform, it merely goes from non-admin to elevated admin. Rather than SYSTEM.

@nyanbinary
If you provide the output from the PoC for such failed attempts, that could help determine why you're getting a 0% success rate.