RedSun: System user access on Win 11/10 and Server with the April 2026 Update

A local privilege escalation to root via an exploitable service?

Doesn't Linux have one of these CVEs...each week?

egeozcan 5 minutes ago | parent | prev | next [-]

I wonder why Windows Defender has the privilege to alter the system files. Read them for analysis? Sure! Reset (as in, call some windows API to have it replaced with the original), why not? But being able to write sounds like a bad idea.

However, I don't know what I'm talking about so take it with a grain of salt!

▲

ranger_danger an hour ago | parent | prev [-]

> normally I would just drop the PoC code and let people figure it out

Looks like that's exactly what they did though?

Or maybe they just meant that they don't usually explain how it works?

	▲	kijin 14 minutes ago \| parent [-]
		Tney gave it a sexy name and set up a website about it (a github repo, at any rate), instead of just talking about it in a mailing list and getting a CVE like a proper bearded security researcher.