EIP-2026-115784

This is a detailed technical analysis of a vulnerability in Microsoft Windows win32k.sys, specifically in the xxxRealDrawMenuItem function, where missing HBITMAP bounds checks in the free build can lead to arbitrary kernel code execution. The writeup includes disassembly analysis, crash logs, and a description of the exploit mechanism.