experiments

실험 다양한 실험 / PoC 저장소입니다. debugging-secure-kernel: QEMU KVM 위에서 Windows 10 보안 커널을 gdb로 디버깅하는 PoC dns: DNS / 인증서 투명성 / 호모글리프에 관한 실험 Attack Surface Reduction: Windows Attack Surface Reduction 내부 동작 원리 분석 VDM: Windows Defender의 VDM 형식시그니처 데이터베이스 Primary Group ID: primaryGroupID AD 특성 변경 시 수행되는 보안 검사 분...

EUVD-2026-77686

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-85921: Double Free

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-91284

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free issue in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...

CVE-2026-69846

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69713

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-69906

Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73246

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

EUVD-2026-73135

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69501

CVE-2026-69501 is an untrusted pointer dereference in Windows Secure Kernel Mode that allows an authorized local attacker to achieve privilege escalation . The underlying cause is improper handling of a pointer in the Secure Kernel Mode component, leading to arbitrary memory access in a high-priv...

Windows Secure Boot Security Feature Bypass Vulnerability

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-69906: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-71332: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

PT-2026-88105

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69501: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-87756

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description An integer overflow or wraparound occurs in Windows Secure Kernel Mode, which allows an authorized attacker to elevate privileges locally. An integer overflow is a conditio...