MSRCwriteup-publishedhigh confidence
CVE-2026-41089: Netlogon's WCHAR-count stack overflow
A Netlogon patch diff and live CLDAP trace show how a byte budget became a WCHAR count, overflowing a domain controller's stack response buffer.
Vulnerability research
Kaluche
Vulnerability research, AI, Windows and Red Teaming.
Research notes on vulnerabilities, 1-day analysis, root causes, and security tooling.
Focus
- 01Vulnerability research
- 02AI
- 03Red Teaming
- 04Windows
Recent research
View allMSRCwriteup-publishedhigh confidence
CVE-2026-47291: the HTTP.sys reference-buffer capacity wrap
A patch diff of http.sys exposes a 16-bit capacity wrap that turns a reference-array resize into a kernel pool overflow.
MSRCwriteup-publishedhigh confidence
CVE-2026-56190: tracking an RDP clipboard lifetime bug through the patch
A static patch diff of rdpcorets.dll shows how Microsoft closed a manager teardown gap affecting CLIPRDR proxy streams and data objects.
Selected disclosures
View all- No CVE assignedIntego Windows Optimizer arbitrary directory deletion
- CVE-2026-27748Avira Software Updater arbitrary file deletion
- CVE-2026-27749Avira System Speedup insecure deserialization
- CVE-2026-27750Avira Optimizer TOCTOU folder deletion
- CVE-2025-67826K7 named pipe registry manipulation and privilege escalation