EUVD-2026-82985

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...

CVE-2026-93689

CVE-2026-93689 is a null pointer dereference in the WinFsp kernel driver's Fast I/O device control handler, affecting versions through 2.2.26215 . The handler fails to validate the volume context before use, allowing an unprivileged local user to trigger a denial of service (system crash) by open...

mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor このプロジェクトは、mimikatz 検出技術のフェーズ 2 のために行われた調査に基づいています。 このソリューションには複数のプロジェクトが含まれています： ConsoleMonitor - コンソール関連トラフィック（ConDrv を介した入出力）をスニッフィングする C の GUI アプリケーション ConsoleMonitorDriver - データをスニッフィングして ConsoleMonitor に送信する KMDF フィルタードライバー MimikatzConsoleDetection...

Monitoring Windows Console Activity (Part 2)

This is the second of two blogs that discuss the implementation of the Windows console architecture from years past, with a primary focus on the current implementation present on modern versions of Windows. Read our first blog, "Monitoring Windows Console Activity Part 1," for more. Capturing the...