<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Driver — PoC Archive</title><link>https://poc.intelseclab.com/tags/driver/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 05 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/driver/index.xml" rel="self" type="application/rss+xml"/><item><title>Windows Secure Kernel (VTL1/VSM) Memory Corruption PoC (CVE-2026-26179 / ZDI-26-276)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-26179-secure-kernel-vsm-poc/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-26179-secure-kernel-vsm-poc/</guid><description>High severity — binary · CVE-2026-26179 / ZDI-26-276. Status: PoC. Affects: Windows Secure Kernel / Virtual Secure Mode (VSM), Virtual Trust Level 1 (VTL1) transfer functions (nt!VslpLockPagesForTransfer, VslpEnterIumSecureMode, nt!VslpUnlockPagesForTransfer). Tags: secure-kernel, vsm, vtl1, windows-kernel, hyper-v, mdl, memory-corruption, driver.</description><category>binary</category><category>High</category><category>secure-kernel</category><category>vsm</category><category>vtl1</category><category>windows-kernel</category><category>hyper-v</category><category>mdl</category><category>memory-corruption</category><category>driver</category></item><item><title>Windows pstrip64.sys BYOVD Physical Memory Local Privilege Escalation — CVE-2026-29923</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/</guid><description>Critical severity — binary · CVE-2026-29923. Status: Weaponized. Affects: pstrip64.sys kernel driver (EnTech Taiwan PowerStrip, up to version 3.90.736). Tags: byovd, windows-kernel, lpe, physical-memory, eprocess, token-theft, driver, ioctl.</description><category>binary</category><category>Critical</category><category>byovd</category><category>windows-kernel</category><category>lpe</category><category>physical-memory</category><category>eprocess</category><category>token-theft</category><category>driver</category><category>ioctl</category></item></channel></rss>