what is cve-2026-50416-writeup-and-poc fr?

This repository documents a security vulnerability found in Windows 11, tracked as CVE-2026-50416, along with proof of concept code that demonstrates it. The bug is a KASLR bypass, which means it leaks a kernel memory address that Windows normally tries to hide from regular programs. It is an information disclosure issue, not a way to run malicious code by itself, but it removes a protection that other attacks depend on. The core problem is that every Windows process which has a desktop gets a small piece of kernel memory mapped into it, called the desktop heap, so that window and menu information can be read quickly without extra system calls. At a specific offset inside this shared memory, a raw kernel pointer is exposed by mistake, one that Windows normally scrubs out before sharing it with user programs. Anyone who can read this pointer can calculate the memory address of any window or menu on the desktop, because a related structure called gSharedInfo tells you how to convert that pointer into exact addresses for specific objects. The repository includes working code that walks through this process step by step: finding the desktop heap from a thread environment block, reading the leaked pointer, and resolving it into concrete kernel addresses for several kinds of windows like buttons, edit boxes, and list boxes. What makes this notable is that the leak works even inside heavily restricted sandboxes, including the kind of low privilege, capability free sandbox that a browser uses to isolate its rendering process. The proof of concept shows that even a sandboxed process with no special permissions and no window created yet can still read this kernel address the moment it starts. Since sandboxes rely on hiding kernel memory locations as part of containing an attacker after a separate bug gives them code execution, this leak weakens that containment. This project is aimed at security researchers and people studying Windows internals or sandbox security, rather than general developers. It is a focused writeup and demonstration of one specific, now documented vulnerability rather than a general purpose tool.