Windows-2026

Windows CTFMON Arbitrary Section Object EoP — GreenPlasma (CVE-2026-45586)

CVE-2026-45586 (GreenPlasma) is a Windows CTFMON Elevation of Privilege vulnerability exploiting an arbitrary named section object creation primitive. A standard unprivileged user can create a section object in any directory object writable by SYSTEM, abusing…