📄 Microsoft Windows 11 build 10.0.27898.1000 Local Privilege Escalation

Proof of concept exploit designed to test a potential local privilege escalation vulnerability in Windows, specifically targeting a feature called AiRegistrySync. It checks if modifications made by a standard user in their own Registry profile can be automatically synchronized propagated into the...

January 29, 2026—KB5074105 (OS Builds 26200.7705 and 26100.7705) Preview

None None...

Exploit for CVE-2025-36911

zWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...

Bypassing Windows Administrator Protection

Posted by James Forshaw A headline feature introduced in the latest release of Windows 11, 25H2 is Administrator Protection. The goal of this feature is to replace User Account Control UAC with a more robust and importantly, securable system to allow a local user to access administrator privilege...

January 24, 2026—KB5078132 (OS Build 22631.6495) Out-of-band

None None...

January 24, 2026—KB5078127 (OS Builds 26200.7628 and 26100.7628) Out-of-band

None None...

HEVD-kernel-exploit

HEVD Kernel Vulnerability Exploitation Articles The project i...

January 17, 2026—KB5077797 (OS Build 22631.6494) Out-of-band

None None...

January 17, 2026—KB5077744 (OS Builds 26200.7627 and 26100.7627) Out-of-band

None None...

WMI Event Subscription Process Persistence

This Metasploit module will create a permanent WMI event subscription to achieve file-less persistence using an event filter that triggers the payload when the specified process is started. Additionally a custom command can be specified to run once the trigger is activated using the advanced opti...

January 13, 2026—KB5073455 (OS Build 22631.6491)

None None...

January 13, 2026—KB5074109 (OS Builds 26200.7623 and 26100.7623)

None None...

Microsoft Windows CSC Service 访问控制错误漏洞

Microsoft Windows CSC Service is an application from Microsoft USA. that allows the use of network files while the local computer is offline. An access control error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could gain access to sensitive...

Microsoft Windows Kernel Mode Drivers 资源管理错误漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit this vulnerability to gain elevated privileges. The following products and...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a buffer error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Virtualization-Based Security Enclave 安全漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment in the address space of host applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Virtualization-Based Security...

KB5073455: Windows 11 version 23H2 Security Update (January 2026)

The remote Windows host is missing security update 5073455. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

Microsoft Windows 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows suffers from a backlink vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions...

Microsoft Win32k 安全漏洞

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server 2022,Windows Server 2022...