Sploitus

Exploit for Menagerie

githubexploit Β· 2026-08-11

Exploit Code

README42 lines
## https://sploitus.com/exploit?id=A08F7391-3CBD-5247-9466-BA75A20E420D
# CVE-2026-62737

> Windows 11 kernel local privilege escalation β€” **unconfirmed / claimed 0-day**

## Overview

Public research describes a potential local privilege-escalation vulnerability in the Windows kernel driver `ExecutionContext.sys`.

The reported issue involves access to the driver from a low-privileged process and insufficient validation of a kernel function pointer before it is dispatched to a worker thread.

The publicly described PoC demonstrates a kernel crash (BSOD). A complete SYSTEM-level privilege-escalation chain has not been publicly demonstrated.

## Details

|                      |                             |
| -------------------- | --------------------------- |
| **CVE**              | CVE-2026-62737              |
| **Platform**         | Windows 11                  |
| **Component**        | `ExecutionContext.sys`      |
| **Type**             | Local Privilege Escalation  |
| **Affected version** | Windows 11 25H2 *(claimed)* |
| **Status**           | Unconfirmed                 |
| **Disclosure**       | August 2026                 |

## Original Research

**Title:** *CVE-2026-62737 0-day Vulnerability Discovery and Analysis*

https://xz.aliyun.com/news/92658

## Notes

At the time this entry was added, the CVE identifier and vulnerability had not been publicly confirmed by Microsoft or NVD.

Treat the included material as security research rather than a verified Microsoft advisory.

## Disclaimer

For security research, education, and authorized testing only.

Do not use this material against systems you do not own or have explicit permission to test.