{"uuid": "737a185a-f47d-4c18-b9d5-cd6e1427ad55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072516662642127", "content": "Somebody posted a Windows 11 LPE writeup, with a CVE that doesn't yet exist (CVE-2026-62737).\nBy poking at kloader's ExecutionContext, we can get kernel mode execution at an arbitrary address.\nA stock Windows VM won't have a NIC that uses the NetAdapterCx framework, so will not show as affected.  But you can start that service to see it in action.\nThe PoC has a hard-coded 0xFFFFF80041414141 as an execution target.  I'm sure that somebody knowledgeable with Windows kernel stuff can figure out how to modify this to do something useful.\nPerhaps CVE-2026-62737 will be included in this Patch Tuesday lineup?", "creation_timestamp": "2026-08-10T18:00:38.586482Z"}