Windows has been reported to suffer from an unpatched "SignDrop" vulnerability that can grant system-level privileges. Independent testers have reproduced this local privilege escalation (LPE) vulnerability, though its actual impact depends on the Windows version and CLFS settings.