By Siddh Shah Overview This blog post describes exploiting two vulnerabilities patched in the Microsoft Windows December 2025 security updates. In the update, three CVEs were assigned to the vulnerable component, two of which, CVE-2025-59517 and CVE-2025-64673, are covered in this post. Note that neither of these vulnerabilities were discovered by Exodus; we linked the CVEs to vulnerable ... Read more From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE The post From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE appeared first on Exodus Intelligence .