EIP-2026-117511

PRE-CVE

Microsoft Windows - 'April Fools 2001' Set Incorrect Date

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117511. PoCs published by Richard M. Smith.

AI-analyzed exploit summary This exploit demonstrates a Daylight Savings Time (DST) calculation bug in MSVCRT.DLL, causing a one-hour offset in Windows applications when April 1st falls on a Sunday. The code tests specific timestamps to show the incorrect DST interpretation.

Description

Microsoft Windows - 'April Fools 2001' Set Incorrect Date

Exploits (1)

exploitdb WORKING POC VERIFIED
by Richard M. Smith · clocalwindows
https://www.exploit-db.com/exploits/19143

This exploit demonstrates a Daylight Savings Time (DST) calculation bug in MSVCRT.DLL, causing a one-hour offset in Windows applications when April 1st falls on a Sunday. The code tests specific timestamps to show the incorrect DST interpretation.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: MSVCRT.DLL (Microsoft Visual C++ Runtime Library versions 4.1, 4.2, 5.0, 6.0)
No auth needed
Prerequisites: Windows system with vulnerable MSVCRT.DLL · April 1st falling on a Sunday
devstral-2 · analyzed Feb 19, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026