Series

Windows Service Trust Boundaries

Public technical analyses of authorization and trust-boundary failures in default Windows services. Entries appear only after the corresponding vendor disclosure.

This page lists public work only. Vendor-coordinated findings appear after the corresponding disclosure and applicable technical-publication window.

All notes
  1. Part 1 Teardown Sep 8, 2026

    CVE-2026-69321: Windows Power Dependency Coordinator Tampering

    Microsoft acknowledged my report of CVE-2026-69321, a Windows Power Dependency Coordinator tampering vulnerability published September 8, 2026.

    Read the teardown