PoC Archive PoC Archive

tag

Link-Following

  • CVE-2026-41091 binary HIGH 7.8 KEV

    Microsoft Defender Link Following Local Privilege Escalation (CVE-2026-41091)

    CVE-2026-41091 is a local privilege escalation vulnerability in Microsoft Defender caused by improper link resolution (CWE-59) during file operations performed with SYSTEM privileges. By racing a Defender-triggered scan against filesystem oplocks, and then…

    Unpatched 2026-07-05
  • CVE-2026-45586 binary HIGH 7.8

    Windows CTFMON Arbitrary Section Object EoP — GreenPlasma (CVE-2026-45586)

    CVE-2026-45586 (GreenPlasma) is a Windows CTFMON Elevation of Privilege vulnerability exploiting an arbitrary named section object creation primitive. A standard unprivileged user can create a section object in any directory object writable by SYSTEM, abusing…

    Patched 2026-06-28