SignDrop: Public PoC Targets CLFS in Windows, Microsoft Has Yet to Release a Fix
The publicly available SignDrop project claims local privilege escalation through the CLFS mechanism in Windows. As of November 13, 2026, Microsoft had not published a CVE, advisory, or fix.