EIP-2026-117503

This is a technical analysis of a vulnerability in Microsoft's MsMpEng (Microsoft Malware Protection Engine) where an x86 emulator exposes dangerous APIs like NtControlChannel, allowing untrusted code to execute with SYSTEM privileges. The writeup details integer overflows, regex parsing issues, and microcode manipulation via specific IOCTL commands.