{"uuid": "abaf6f52-9039-4bc2-b93f-f856e963f92d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50416", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqwvxvo2jp2i", "content": "Wrote up CVE-2026-50416.  win32k maps the desktop heap into every process. Offset 0x100 hands out a raw kernel session pool pointer. Readable from Low IL, AppContainer, even a zero capability LPAC.\nhtt\u2026\n\n\ud83d\udd01 RT @karollooool | reposted by @HackingLZ\nhttps://x.com/karollooool/status/2078093307129831770", "creation_timestamp": "2026-07-18T18:38:46.952353Z"}