An unpatched Windows local privilege escalation exploit called BlueHammer was leaked to GitHub this week, with a working proof-of-concept already confirmed on fully patched Windows 10 and 11. Here is what it does, why local admin rights make your exposure worse, and what you can do right now while there is no patch.