tag

Defender-Bypass

KillChain — Vulnerable Kernel Driver IOCTL Protected-Process Termination (CVE-2026-0828)

CVE-2026-0828· ProcessMonitorDriver.sys (vulnerable third-party kernel driver) unpatched