What is cve-2026-40369-exploit?

This repository contains exploit code and a technical write-up for a Windows kernel security vulnerability identified as CVE-2026-40369. The vulnerability exists in a core Windows system component and allows an unprivileged process, meaning one running with normal user permissions and no special access, to write to arbitrary locations in the operating system's kernel memory. The kernel is the most privileged part of the operating system, so the ability to write to it can be used to escalate privileges and take full control of the machine. The write-up explains that the bug exists in how Windows handles a specific type of system information query. When called in a particular way, the code skips a safety check and attempts to increment values at a caller-supplied memory address without validating that the address is safe to write. The repository claims the vulnerability affects Windows 11 versions 24H2 through 25H2, can be triggered from within browser sandboxes, and works with 100 percent reliability. It is written in C++ and is intended for security researchers studying privilege escalation on Windows.