Windows-Kernel — PoC Archivehttps://poc.intelseclab.com/tags/windows-kernel/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Windows Secure Kernel (VTL1/VSM) Memory Corruption PoC (CVE-2026-26179 / ZDI-26-276)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-26179-secure-kernel-vsm-poc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-26179-secure-kernel-vsm-poc/High severity — binary · CVE-2026-26179 / ZDI-26-276. Status: PoC. Affects: Windows Secure Kernel / Virtual Secure Mode (VSM), Virtual Trust Level 1 (VTL1) transfer functions (nt!VslpLockPagesForTransfer, VslpEnterIumSecureMode, nt!VslpUnlockPagesForTransfer). Tags: secure-kernel, vsm, vtl1, windows-kernel, hyper-v, mdl, memory-corruption, driver.binaryHighsecure-kernelvsmvtl1windows-kernelhyper-vmdlmemory-corruptiondriverWindows pstrip64.sys BYOVD Physical Memory Local Privilege Escalation — CVE-2026-29923https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/Critical severity — binary · CVE-2026-29923. Status: Weaponized. Affects: pstrip64.sys kernel driver (EnTech Taiwan PowerStrip, up to version 3.90.736). Tags: byovd, windows-kernel, lpe, physical-memory, eprocess, token-theft, driver, ioctl.binaryCriticalbyovdwindows-kernellpephysical-memoryeprocesstoken-theftdriverioctlWindows ikeext.dll IKEv2 Double-Free Remote Kernel Exploit — CVE-2026-33824https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33824-ikev2-ikeext-double-free-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33824-ikev2-ikeext-double-free-rce/Critical severity — network · CVE-2026-33824. Status: Weaponized. Affects: Windows IKEv2 IPsec driver (ikeext.dll). Tags: ikev2, windows-kernel, double-free, ikeext, rop-chain, heap-grooming, reverse-shell, anti-debug, packet-fragmentation.networkCriticalikev2windows-kerneldouble-freeikeextrop-chainheap-groomingreverse-shellanti-debugpacket-fragmentationWindows Kernel Elevation of Privilege - Race Condition / Double-Free (CVE-2025-62215)https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-kernel-eop-cve-2025-62215/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-kernel-eop-cve-2025-62215/High severity (CVSS 7) — binary · CVE-2025-62215. Status: Weaponized. Affects: Windows Kernel (ntoskrnl.exe / kernel resource synchronization). Tags: EoP, Windows kernel, race condition, double-free, heap corruption, 0day, SYSTEM, Windows 10, Windows 11.binaryHighEoPWindows kernelrace conditiondouble-freeheap corruption0daySYSTEMWindows 10Windows 11