NewsGoogle Project Zero
Windows Exploitation Techniques: Dangling COM Object Registrations
Linked advisories
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.7 security update
- CVE-2026-50343microsoft windows_10_1809: unzureichende Rechteverwaltung
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.6 security update
- CVE-2026-50343microsoft windows_10_1809: unzureichende Rechteverwaltung
- CVE-2026-50343Microsoft Windows Produkte: Mehrere Schwachstellen
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update
- CVE-2026-66804microsoft windows_10_22h2: unzureichende Zugriffskontrolle
- CVE-2026-50343Microsoft Install Service Elevation of Privilege Vulnerability
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update
- CVE-2026-66804microsoft windows_10_22h2: unzureichende Zugriffskontrolle
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.2 security update
- CVE-2026-66804Microsoft Windows Produkte: Mehrere Schwachstellen
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.14 security update
- CVE-2026-66804Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.10 security update
- CVE-2026-66804Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update
- CVE-2026-66804Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.6 security update
Affected vendors and products
- Microsoft Microsoft Windows 10 1809
- Microsoft Microsoft Windows 10 21H2
- Microsoft Microsoft Windows 10 22h2
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21h2
- Microsoft Windows 10 Version 22h2
- Microsoft Microsoft Windows 11 24H2
- Microsoft Microsoft Windows 11 25H2
- Microsoft Microsoft Windows 11 26H1
- Microsoft Windows 11 Version 24h2
- Microsoft Windows 11 Version 25h2
- Microsoft Windows 11 Version 26h1
More on Techniques
Other advisories
- Not ratedosv:CLEANSTART-2024-DI60921Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine
- Not ratedosv:CLEANSTART-2024-BN02313Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine
- Not ratedosv:CLEANSTART-2024-TO14044Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing Web...
- Not ratedosv:CLEANSTART-2024-NU89872Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine
- Not ratedosv:CLEANSTART-2024-QD64034Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing Web...
- Not ratedosv:CLEANSTART-2024-JF62470Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine
- MediumCVE-2023-51436Japan System Techniques UNIVERSAL PASSPORT RX: Cross-Site-Scripting (XSS)
- MediumCVE-2023-42427Japan System Techniques UNIVERSAL PASSPORT RX: Cross-Site-Scripting (XSS)
Other news entries
- The Sandbox Fights Back: Joe Security Launches Adaptive DetonationNewsCSO Online
- Binance says hackers who stole billions in crypto spent months planning heistNewsArs Technica — Security
- Binance says hackers who stole billions in crypto spent months planning the heistNewsArs Technica — Security
- Chainalysis Discloses Data Breach Following AI-Driven CyberattackNewsSecurityWeek
- Why do we keep testing employees for yesterday’s phishing attacksNewsCSO Online
- Chainalysis discloses data breach from "offensive agentic techniques"NewsBleepingComputer
- Chainalysis breach: all-customer password hashes and live tokens exposed; Reactor, KYT and Address Screening back onlineBreachpwn.watch
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
Source: https://projectzero.google/2026/09/windows-dangling-com.html
ID