CVE-2026-24291: Windows LPE (RegPwn)

[ADMIN]

Exploit:

GitHub - mdsecactivebreach/RegPwn

Contribute to mdsecactivebreach/RegPwn development by creating an account on GitHub.

github.com

Blog:

RIP RegPwn - MDSec

13th March 2026 As part of MDSec’s R&D work, we often discover vulnerabilities and develop exploits to support our red team engagements. When researching widely used software, it is often...

www.mdsec.co.uk

BOF:

GitHub - Flangvik/RegPwnBOF: Bof of RegPwn by MDSec

Bof of RegPwn by MDSec. Contribute to Flangvik/RegPwnBOF development by creating an account on GitHub.

github.com

Tested versions:
Windows 11 25h2
Windows 11 24h2
Windows 10 21h2
Windows Servers 2016/2019/2022

Patched: Mar 10, 2026