Vulnerability research, AI, Windows and Red Teaming.https://kaluche.github.io/enhttps://kaluche.github.io/research/msrc/2026-05/cve-2026-41089/https://kaluche.github.io/research/msrc/2026-05/cve-2026-41089/A Netlogon patch diff and live CLDAP trace show how a byte budget became a WCHAR count, overflowing a domain controller's stack response buffer.Sat, 18 Jul 2026 00:00:00 GMThttps://kaluche.github.io/research/msrc/2026-06/cve-2026-47291/https://kaluche.github.io/research/msrc/2026-06/cve-2026-47291/A patch diff of http.sys exposes a 16-bit capacity wrap that turns a reference-array resize into a kernel pool overflow.Sat, 18 Jul 2026 00:00:00 GMThttps://kaluche.github.io/research/msrc/2026-07/cve-2026-56190/https://kaluche.github.io/research/msrc/2026-07/cve-2026-56190/A static patch diff of rdpcorets.dll shows how Microsoft closed a manager teardown gap affecting CLIPRDR proxy streams and data objects.Fri, 17 Jul 2026 00:00:00 GMT