Curated security research, vulnerabilities, advisories and tools for practitioners.

#windows

Security coverage tagged windows.

1.

Plug & Pwn: Mapping the Windows PnP Auto-Install Attack Surface

blog | 2026-09-10 00:00 | netlas.io | original ↗ | #attack-surface | #privilege-escalation | #windows

2.

FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit

vulnerability | High | 2026-09-03 02:48 | github.com | original ↗ | #zero-day | #privilege-escalation | #windows

3.

CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM

vulnerability | High | 2026-08-13 01:42 | CVE-2026-66804 | github.com | original ↗ | #public-poc | #privilege-escalation | #windows-security

4.

CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass

vulnerability | High | 2026-08-11 19:35 | CVE-2026-50656 | github.com | original ↗ | #zero-day | #public-poc | #privilege-escalation

5.

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs

vulnerability | 2026-08-11 00:00 | crowdstrike.com | original ↗ | #zero-day | #vulnerability-management | #microsoft

6.

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

vulnerability | Medium | 2026-08-06 00:00 | CVE-2026-12003 | bishopfox.com | original ↗ | #privilege-escalation | #windows | #python

7.

Should I Domain Join Backup Servers?

blog | 2026-07-19 08:06 | projectblack.io | original ↗ | #active-directory | #backup-security | #ransomware

8.

Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197)

vulnerability | High | 2026-07-02 10:18 | CVE-2026-34197 | crowdfense.com | original ↗ | #rce | #public-poc | #featured

9.

CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation

vulnerability | High | 2026-07-07 03:52 | CVE-2026-42980 | github.com | original ↗ | #public-poc | #kernel-security | #privilege-escalation

10.

Windows Privilege Abuse: How Attackers Escalate from Accounts with Dangerous Rights to Active Directory Compromise

research | 2026-07-06 18:15 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #identity-security

11.

The Click that shouldn’t have worked: RCE via clickjacking in Internet Explorer

research | 2026-06-05 11:18 | swarm.ptsecurity.com | original ↗ | #rce | #windows | #clickjacking

12.

Implementing Impacket's Newest Protocol: MS-RAA

blog | 2026-05-27 00:00 | abdulmhsblog.com | original ↗ | #pentesting | #active-directory | #windows

13.

CVE-2026-24294: Windows SMB local NTLM reflection privilege-escalation PoC

vulnerability | High | 2026-04-30 04:31 | CVE-2026-24294 | github.com | original ↗ | #public-poc | #featured | #privilege-escalation

14.

Citrix Breakout When Restricted Means Nothing

blog | 2026-04-14 14:10 | labs.cognisys.group | original ↗ | #windows | #red-team | #citrix

15.

Milking the last drop of Intego - Time for Windows to get its LPE

research | 2026-04-06 22:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #windows-security

16.

Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV

research | 2026-03-02 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #deserialization

17.

Who’s on the Line? Exploiting RCE in Windows Telephony Service

research | 2026-01-19 13:00 | swarm.ptsecurity.com | original ↗ | #rce | #vulnerability-research | #windows

18.

K7 Antivirus: Named pipe abuse, registry manipulation and privilege escalation (CVE-2025-67826)

vulnerability | High | 2025-12-01 23:00 | CVE-2025-67826 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #windows-security

19.

BYOVD to the next level (part 2) — rootkit like it's 2025

research | 2025-10-08 22:00 | blog.quarkslab.com | original ↗ | #windows | #post-exploitation | #kernel

20.

BYOVD to the next level (part 1) — exploiting a vulnerable driver (CVE-2025-8061)

vulnerability | High | 2025-09-22 22:00 | CVE-2025-8061 | blog.quarkslab.com | original ↗ | #privilege-escalation | #windows | #driver

21.

Bypassing Windows Login Without Password

research | 2025-09-12 05:55 | projectblack.io | original ↗ | #pentesting | #privilege-escalation | #windows

22.

The Guest Who Could: Exploiting LPE in VMWare Tools

research | 2025-07-22 13:32 | swarm.ptsecurity.com | original ↗ | #vulnerability-research | #windows | #saml

23.

Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

vulnerability | 2025-07-09 14:05 | CVE-2025-49689 | swarm.ptsecurity.com | original ↗ | #privilege-escalation | #windows | #ntfs

24.

Kali Linux On The New Modern WSL

blog | 2025-01-28 00:00 | kali.org | original ↗ | #microsoft | #windows | #virtualization

25.

LDAPNightmare Explained

vulnerability | 2025-01-13 21:04 | CVE-2024-49113 | semperis.com | original ↗ | #rce | #denial-of-service | #windows

26.

Intune - Setting Registry Keys with Startup Scripts

research | 2024-11-07 06:00 | projectblack.io | original ↗ | #windows | #registry | #mdm

27.

Disable WPAD via GPO

research | 2024-10-16 06:30 | projectblack.io | original ↗ | #windows | #proxy | #hardening

28.

Solving BinaryShield VM Crackme by ra1n

blog | 2024-09-25 00:00 | blog.washi.dev | original ↗ | #windows | #reverse-engineering | #obfuscation

29.

Windows Wi-Fi Driver RCE Vulnerability – CVE-2024-30078

vulnerability | 2024-08-01 19:32 | CVE-2024-30078 | crowdfense.com | original ↗ | #rce | #windows | #vulnerability-analysis

30.

Enable SMB Signing via GPO

research | 2024-06-26 02:27 | projectblack.io | original ↗ | #active-directory | #windows | #hardening