iocp

1 article in this topic.

March 2026

1 article
  1. CVE-2026-24289: Windows Kernel IOCP Race Condition - The Ghost We Proved by Salting the Circle

    WinForge's maiden voyage: a brand new pipeline module - QEMU VMs instead of Docker, WinDbg instead of GDB, binary diffing instead of source - pointed at a use-after-free in ntoskrnl.exe. 363 functions changed between builds, 8 needles in the haystack, and a PoC that ran 500,000 iterations without crashing. Because that was the point.

    20 min read