[CVE-2026-66804] Windows Exploitation Techniques: Dangling COM Object Registrations

The PoC demonstrates a complete local privilege-escalation chain from a standard user to SYSTEM, and exploit code is now public. Affected Windows endpoints should install Microsoft's August 2026 security updates promptly. Reproduction plants a DLL in a system path and triggers a privileged service, so it should only be performed in an explicitly authorized, recoverable lab environment.

A Google Project Zero post detailing exploitation of CVE-2014-6350 to escape Internet Explorer's Enhanced Protected Mode sandbox.

A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.

A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.

A Google Project Zero write-up demonstrating how the DRAM rowhammer hardware flaw can be exploited from an unprivileged process to gain kernel privileges.

Hard links are legal inside Windows sandboxes, making them a useful exploitation primitive; the post weighs their pros and cons and demonstrates them in the real vulnerability CVE-2015-4481.