CVE-2026-26179

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug. I'm well aware that I have a dedicated repository for my vulnerabilities and/or exploits, but this bug in particular is rather special at least to me. As such, I have opted to give it its own repository. I also pla...

experiments

Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...

CVE-2026-85921

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

EUVD-2026-77686

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-85921

CVE-2026-85921 is a double free vulnerability in Windows Secure Kernel Mode that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, high privileges required, and changed scope , resulting in high impact to con...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-85921: Double Free

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-91284

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free issue in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...

CVE-2026-83939

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69906

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69846

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69501

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69906

Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....

EUVD-2026-73725

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

EUVD-2026-73246

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

EUVD-2026-73135

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69501

CVE-2026-69501 is an untrusted pointer dereference in Windows Secure Kernel Mode that allows an authorized local attacker to achieve privilege escalation . The underlying cause is improper handling of a pointer in the Secure Kernel Mode component, leading to arbitrary memory access in a high-priv...