karollooool/CVE-2026-50416-writeup-and-poc: an open-source tool on GitHub for self-hosters
TL;DR On Windows 11 Insider build 10.0.28020.2149, the user mode mapping of the win32k desktop heap hands out a raw kernel session pool pointer at offset 0x100. Any process that has a desktop can read...
Continue Reading