DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

CVE-2026-96139

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

EUVD-2026-121811

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-96139

A vulnerability exists in Windows Kernel-Mode Drivers due to an untrusted pointer dereference (CWE-822). This flaw allows an authorized attacker to achieve local privilege escalation . While the provided documentation confirms the existence of the vulnerability and its impact on local privileges,...

PT-2026-144337

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Microsoft Windows Kernel-Mode Drivers Use-After-Free / Privilege Escalation

Microsoft Windows Kernel-Mode Drivers contain a use-after-free in Frame Server stream handling that allows an authorized local attacker to elevate privileges. The proof of concept races stream publishing and closure to obtain SeDebugPrivilege and launch a command shell...

CVE-2026-96915

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-96849

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-96247

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-85871

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-85857

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-83837

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83834

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83637

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83568

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-69971

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-96915

An integer overflow or wraparound vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's impact is categorized as high for confidentiality, integrity, and availability, specific exploit code or...

EUVD-2026-100244

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

EUVD-2026-100010

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83837

A vulnerability in Windows Kernel-Mode Drivers exists due to improper access control . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-441 (Unintended Proxy or Intermediary). While the documentation confirms the high sever...