Windows COM Flaw Lets Attackers Gain SYSTEM Privileges With a Malicious DLL
Project Zero details CVE-2026-66804, a Windows COM flaw giving SYSTEM via planted DLL; patched in August, PoC and commercial module public.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #com
Windows Exploitation Techniques: Dangling COM Object Registrations
Project Zero details patched Windows CVE-2026-66804, a privilege escalation via a dangling COM registration.
6