{"vulnerability": "CVE-2026-20805", "sightings": [{"uuid": "93f29043-5f44-4cd9-a25c-84f86f4923bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdx74sef5u27", "content": "", "creation_timestamp": "2026-02-03T10:55:03.675011Z"}, {"uuid": "53094600-6f96-4beb-bfbb-0f717a8f6701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgeghxcimq2i", "content": "", "creation_timestamp": "2026-03-06T04:01:33.938869Z"}, {"uuid": "5ed0b87c-c9f6-4b5e-a271-5960bb32d5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuigdepys2w", "content": "", "creation_timestamp": "2026-02-15T02:28:41.534576Z"}, {"uuid": "2b44bb3b-14ca-455d-9cf3-9d7bf924b259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdulqvwaqa2u", "content": "", "creation_timestamp": "2026-02-02T10:03:04.239394Z"}, {"uuid": "6401236f-52db-4e27-bcf5-912119ca7544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922981", "content": "", "creation_timestamp": "2026-03-04T01:43:04.831637Z"}, {"uuid": "e0e45444-baac-4bea-8f49-b770baaed1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://gist.github.com/wjfthomas318-rgb/5eb1bae5750157b0d4bf7e7b2447d92f", "content": "", "creation_timestamp": "2026-02-01T00:50:27.000000Z"}, {"uuid": "fa41c10c-8f17-44a8-b0eb-ae2e41d85dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3me2avypk4l2q", "content": "", "creation_timestamp": "2026-02-04T16:05:02.169124Z"}, {"uuid": "d395435c-373a-4faf-a656-786d99afa660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.jpcert.or.jp/english/at/2026/at260001.html", "content": "", "creation_timestamp": "2026-01-14T02:33:00.000000Z"}, {"uuid": "01d31ae4-c0d1-4b55-850a-8a3bf4b3476a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1719", "content": "", "creation_timestamp": "2026-01-14T04:00:00.000000Z"}, {"uuid": "72d65d11-37ab-400f-bfa0-af58dca1eb8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889096590340890", "content": "", "creation_timestamp": "2026-01-13T18:01:20.044560Z"}, {"uuid": "5510410d-9cfb-4674-95a2-db54ee033619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://gist.github.com/Darkcrai86/18f12ae525844ab36fc9dbf2a97f81cc", "content": "", "creation_timestamp": "2026-01-13T19:21:57.000000Z"}, {"uuid": "56e9547b-cc89-4cc6-8387-34c6aad1f411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kalervohintsanen.bsky.social/post/3mcdcb2jzzc2g", "content": "", "creation_timestamp": "2026-01-13T19:32:47.009447Z"}, {"uuid": "ad2c30da-544e-4b4f-9bd8-2d6861e0886f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "70c80b9f-f1e7-46fb-968c-f508618560cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcdjhqlmn72w", "content": "", "creation_timestamp": "2026-01-13T21:41:41.784895Z"}, {"uuid": "11737ebd-33e2-47c4-9afc-3277c1c1dd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "05d378ee-e603-4e64-8aeb-21b5e0db71e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-january-2026-monthly-rollup-av26-024", "content": "", "creation_timestamp": "2026-01-13T19:32:30.000000Z"}, {"uuid": "9024ab38-a9b9-4323-b1a0-6058c8b93bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcdtwded5c2m", "content": "", "creation_timestamp": "2026-01-14T00:48:49.308123Z"}, {"uuid": "6ca3d3bf-3648-4d60-a854-db94313eafa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115890728097103283", "content": "", "creation_timestamp": "2026-01-14T00:56:15.030147Z"}, {"uuid": "c1496176-7796-4699-b3ad-1d7b6e446e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mcduovqfnw2t", "content": "", "creation_timestamp": "2026-01-14T01:02:33.895735Z"}, {"uuid": "9eeb87e6-6113-4458-a291-daf2000355e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mce6nzbu6n2a", "content": "", "creation_timestamp": "2026-01-14T04:01:01.517041Z"}, {"uuid": "2f9e29df-1782-4d65-9834-b492e4e78d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mcee2ae7zs2w", "content": "", "creation_timestamp": "2026-01-14T05:38:34.590668Z"}, {"uuid": "271bd3dc-9c40-4c49-9ea3-00fc77821086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mceio7jeyt26", "content": "", "creation_timestamp": "2026-01-14T07:00:04.931364Z"}, {"uuid": "b2294332-ea73-45e9-896d-7f5198ecb75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ie-news.bsky.social/post/3mcel6qpzd72u", "content": "", "creation_timestamp": "2026-01-14T07:45:08.101677Z"}, {"uuid": "520ad0d3-076d-4154-b1d5-a63f87078748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcews2ck5x2p", "content": "", "creation_timestamp": "2026-01-14T11:12:46.676842Z"}, {"uuid": "695019ab-85bd-43f0-a124-b27a29eca8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mcf4lzwk5b2z", "content": "", "creation_timestamp": "2026-01-14T12:56:47.215032Z"}, {"uuid": "0fc074a8-87f1-4eab-9e3c-1d63f1eab39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcf6xcuxev23", "content": "", "creation_timestamp": "2026-01-14T13:38:52.997471Z"}, {"uuid": "506c337f-6699-4b81-9e25-c37ab5bf8109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115894111458306975", "content": "", "creation_timestamp": "2026-01-14T15:16:40.799430Z"}, {"uuid": "2eaa0ee1-1875-4ced-b37b-1a2dd90bd18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/darkreading.bsky.social/post/3mcff3prvun2v", "content": "", "creation_timestamp": "2026-01-14T15:28:43.003673Z"}, {"uuid": "70cf45a0-04da-4902-815e-0e18bbe07505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3mcflpn7olt2a", "content": "", "creation_timestamp": "2026-01-14T17:27:15.042430Z"}, {"uuid": "9a612caa-5291-47fa-b8ad-1eac7ac692f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20805", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115894624907982414", "content": "", "creation_timestamp": "2026-01-14T17:27:16.075480Z"}, {"uuid": "3b537a37-8849-4068-b60d-63f666bc2e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115894625704571989", "content": "", "creation_timestamp": "2026-01-14T17:27:31.587162Z"}, {"uuid": "b02ac3b0-fc5d-4d6a-b91e-4fe9b58db62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mcflq6nymw24", "content": "", "creation_timestamp": "2026-01-14T17:27:31.974862Z"}, {"uuid": "308a8f40-0111-4c60-95c8-f5841f479d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mcflqtpad22h", "content": "", "creation_timestamp": "2026-01-14T17:27:54.018906Z"}, {"uuid": "d342ca94-2c7b-4fb0-89d7-53d935fbbcba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcflv5kpxs2o", "content": "", "creation_timestamp": "2026-01-14T17:30:19.032025Z"}, {"uuid": "89e2f149-472a-43bc-ac76-4e85c8630644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mcfptndlxi2j", "content": "", "creation_timestamp": "2026-01-14T18:41:03.487922Z"}, {"uuid": "b7b7983e-836d-4887-8aef-4e798d206911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://threatintel.cc/2026/01/14/cyber-threat-intelligence-briefing-jan.html", "content": "", "creation_timestamp": "2026-01-14T14:17:01.000000Z"}, {"uuid": "9d9d2fce-a391-4434-967b-7c2d88b9fb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcfxrjef4f2f", "content": "", "creation_timestamp": "2026-01-14T21:03:02.548049Z"}, {"uuid": "13a40d83-167b-4bfa-9330-0b97345f473f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mcg6j3yi3k26", "content": "", "creation_timestamp": "2026-01-14T23:03:39.136721Z"}, {"uuid": "a61c3383-3953-48f0-9f2c-74024d62440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcge5fxhe22h", "content": "", "creation_timestamp": "2026-01-15T00:44:32.960632Z"}, {"uuid": "feab5916-06fd-4281-9e46-8423fa081366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/gamepulsenews.bsky.social/post/3mcgmgfnlma2j", "content": "", "creation_timestamp": "2026-01-15T03:12:37.428653Z"}, {"uuid": "040ba940-5889-4c5b-9780-cf3828a7118c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/115898561732709585", "content": "", "creation_timestamp": "2026-01-15T10:08:26.634970Z"}, {"uuid": "520f45b8-8a39-4772-bf0e-b25d3ed1e6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mchjz3midb2j", "content": "", "creation_timestamp": "2026-01-15T12:02:03.548610Z"}, {"uuid": "aa7bbde1-675a-4d88-9b3e-0ac4f03a8e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mci7bdw5l326", "content": "", "creation_timestamp": "2026-01-15T18:22:28.533709Z"}, {"uuid": "0b0b9a47-ff62-4216-986b-be07960656d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mclx2zwxcz2j", "content": "", "creation_timestamp": "2026-01-17T06:06:26.233379Z"}, {"uuid": "6e09ae70-a774-4d59-94fa-3957f2bb7500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolhcdjec2k", "content": "", "creation_timestamp": "2026-01-18T07:16:33.428799Z"}, {"uuid": "36626725-f4da-47bd-b450-07289e9e045a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolppqv5k2k", "content": "", "creation_timestamp": "2026-01-18T07:21:17.199200Z"}, {"uuid": "abf407c5-266a-4395-a3cb-e44fc46435ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcomkgc2322k", "content": "", "creation_timestamp": "2026-01-18T07:36:13.187379Z"}, {"uuid": "eaf6b714-4831-40f8-9c07-abab7bac21e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcqlrxhzfa2a", "content": "", "creation_timestamp": "2026-01-19T02:27:49.119950Z"}, {"uuid": "35557ee0-c8a5-4d47-902c-f6265ffb2613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mcqvb6aus32m", "content": "", "creation_timestamp": "2026-01-19T05:17:23.503988Z"}, {"uuid": "70340683-6357-45f9-996a-7832a16e54b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/", "content": "", "creation_timestamp": "2026-01-13T23:47:38.000000Z"}, {"uuid": "b0cc5004-9858-4470-a13f-6f174d969d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcsakxgm6s24", "content": "", "creation_timestamp": "2026-01-19T18:12:28.878248Z"}, {"uuid": "ca06aa2c-79cc-4f38-aae0-e24d099667b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcu63e3i3224", "content": "", "creation_timestamp": "2026-01-20T12:33:16.027395Z"}, {"uuid": "af835604-60e0-4516-a2bf-296d97326281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3md6dmusf4k2x", "content": "", "creation_timestamp": "2026-01-24T13:39:07.557576Z"}, {"uuid": "edb685f8-e549-43b1-84ad-bcb66d26909d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3md6dv5ruuk2x", "content": "", "creation_timestamp": "2026-01-24T13:43:45.508476Z"}, {"uuid": "2181a7ea-d9bb-4d0c-b62e-f1d69a6c3043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3ab54db-4e6a-4bdd-831a-e3622881d712", "content": "", "creation_timestamp": "2026-02-02T12:25:42.998192Z"}, {"uuid": "e11b1566-7c11-4300-ae34-4a882b61a06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "3c48474e-6348-4512-aeae-7b91316ed79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/true_secator/7911", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 13-\u043e\u0433\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 287 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Chrome, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 37 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 - \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u0440\u0435\u043a\u043b\u0430\u043c\u044b, \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0438 \u0438 \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n2. LayerX \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0438\u0437\u00a030 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u043e\u0434 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0418\u0418 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 iframe \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n3. Quarkslab \u043e\u0431\u0432\u0438\u043d\u0438\u043b\u0430 Intego \u0432 \u043e\u0442\u043a\u0430\u0437\u0435 \u043e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f macOS, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e.\n\n3. RCE Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 W3 Total Cache \u0434\u043b\u044f WordPress - CVE-2025-9501. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 WordPress.\n\n4. \u0420\u0430\u0441\u043a\u0440\u044b\u0442 \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u0435\u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0440\u0435\u043a\u043b\u0430\u043c\u044b, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u043f\u043e \u0434\u043e\u043c\u0435\u043d\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0441\u043f\u0438\u0441\u043a\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u044b. \n\n5. Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434, \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0442\u043e\u043d\u043a\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 LLM \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u043e\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 GRP-Obliteration\u00a0(\u043f\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043c\u0435\u0442\u043e\u0434\u0430 - Group Relative Policy Optimization (GRPO). \n\nMicrosoft \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u0441\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 15 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c LLM, \u043e\u0442 DeepSeek \u0434\u043e GPT \u0438 Llama.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LayerX \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Claude Desktop Extensions (DXT), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c Google \u041a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Claude Desktop Extensions. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 10 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 50 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 DXT.\n\n7. FIRST \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 60 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0432\u044b\u0439 \u0433\u043e\u0434 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u0442 \u043f\u043e\u0440\u043e\u0433 \u0432 50 000.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u0433\u043e\u0434\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000.\n\n8. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0440\u0435\u0434\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE, \u0432 Microsoft 365 \u0438 Microsoft Office (CVE-2026-21509) \u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432 Desktop Window Manager (CVE-2026-20805).\n\n9. \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u043e\u0433 Pwn2Own\u00a0\u043e\u0442 Zero Day Initiative - Tianfu Cup \u043f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0432 2026 \u0433\u043e\u0434\u0443. \u041c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u043e\u0441\u044c 29-30 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Natto Thoughts, \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u041c\u041e\u0411 \u041a\u041d\u0420 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0432 \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\n10. Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 LNK-\u043a\u043e\u0434\u0430 \u0432 Windows - \u044d\u0442\u043e \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u041d\u0430 \u0444\u0435\u0441\u0442\u0438\u0432\u0430\u043b\u0435 Wild West Hackin' Fest \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u0438\u0442\u0446\u0435 \u0411\u0435\u0443\u043a\u0435\u043c\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00a0\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00a0\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a Windows \u0440\u0430\u0441\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u044b \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0443\u044e\u0449\u0438\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u044f\u0440\u043b\u044b\u043a\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b lnk-it-up - \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u044f\u0440\u043b\u044b\u043a\u0438 Windows LNK \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.", "creation_timestamp": "2026-02-13T18:00:09.000000Z"}, {"uuid": "d4d34ec5-26ee-40be-9f11-c99507a49aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-30T00:00:49.101725Z"}, {"uuid": "f9f1745f-3f5a-4640-9d9b-2053462fef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-29T20:00:23.770776Z"}, {"uuid": "d8293f14-1a48-4e8a-9076-e255f8686d11", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/835bda96-0039-432c-a07c-10d8940d90b8", "content": "", "creation_timestamp": "2026-06-19T12:45:19.833878Z"}, {"uuid": "85086977-b3ff-4c40-bcf5-c5655e635ca3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c8a32f4-f021-40d5-aa4e-568b637e420c", "content": "", "creation_timestamp": "2026-06-23T14:03:45.490527Z"}, {"uuid": "ecbe24d0-5c18-4b60-9b1d-af2466d80156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.157959Z"}, {"uuid": "bb952f62-39bc-4ee3-8c92-ed87cf633c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.307527Z"}, {"uuid": "517aab94-9ffb-4850-ad95-d7c5cc3db667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.674573Z"}, {"uuid": "747bdd7d-83b5-441f-a427-f779ad10dcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.773595Z"}, {"uuid": "5ef5ccbc-b0f9-4b5b-9dec-6c9da8339bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:12.009771Z"}, {"uuid": "a7429b93-53b4-439b-8251-d02a33b70801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:04.948766Z"}, {"uuid": "f022e22e-872a-460f-93e4-7d1349bd0b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.247491Z"}, {"uuid": "990e3ba5-e21c-4935-8254-2899f72d2dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-29T20:00:23.536874Z"}, {"uuid": "19270816-068b-4d43-bc1f-3d02d3d58446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:10.821033Z"}, {"uuid": "130649d2-19e0-4c9f-b312-4e68b66e6616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.554563Z"}, {"uuid": "10c08ed5-86ef-4139-b48c-bf3236492f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.081282Z"}, {"uuid": "58c3562f-60ec-4d6f-bd50-efe64f2afeaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-30T00:00:49.378125Z"}, {"uuid": "4a5588b6-0185-4435-957b-4ab62d7f931e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-31T00:00:10.899981Z"}, {"uuid": "1c6a4179-d9b2-4743-99db-18bead23cc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-31T00:00:10.513595Z"}, {"uuid": "742a8f60-d1db-4b68-8db7-627d194f51d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/GithubRedTeam/101928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:29:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T15:00:05.484570Z"}, {"uuid": "cf789e27-008a-4714-a920-50b91aa6c88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/GithubRedTeam/101954", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 15:49:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T17:00:04.040335Z"}]}