Oplock โ€” PoC Archivehttps://poc.intelseclab.com/tags/oplock/Latest proof-of-concept entries.Hugoen-usSun, 19 Jul 2026 00:00:00 +0000LegacyHive - Windows user profile service arbitrary hive load elevation of privileges vulnerabilityhttps://poc.intelseclab.com/pocs/binary/2026-07-19_legacyhive-user-profile-service-hive-load-lpe/Sun, 19 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-19_legacyhive-user-profile-service-hive-load-lpe/High severity โ€” binary. Status: Weaponized. Affects: Microsoft Windows user profile service / registry hive loading path. Tags: windows, lpe, user-profile-service, registry-hive, usrclass.dat, oplock, symbolic-link.binaryHighwindowslpeuser-profile-serviceregistry-hiveusrclass.datoplocksymbolic-linkMicrosoft Defender Link Following Local Privilege Escalation (CVE-2026-41091)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-41091-defender-link-following-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-41091-defender-link-following-lpe/High severity (CVSS 7.8) โ€” binary ยท CVE-2026-41091. Status: Weaponized. Affects: Microsoft Defender / Microsoft Malware Protection Engine. Tags: windows, microsoft-defender, link-following, cwe-59, cloud-files-api, ntfs-junction, oplock, privilege-escalation, lpe.binaryHighwindowsmicrosoft-defenderlink-followingcwe-59cloud-files-apintfs-junctionoplockprivilege-escalationlpe