In May 2026, SyncBreeze released an update that silently patched a critical vulnerability. The vulnerability was an authentication bypass allowing arbitrary file operations, but when chained with another persistent flaw, it enables logical RCE with SYSTEM privileges. This exploit chain was provided as part of our n-day feed, and now that it has been patched, we can finally disclose it. SyncBreeze SyncBreeze...
A few months ago, I began integrating Claude AI into my N-day research at Crowdfense to speed up my workflow. At first, I wanted to test its capabilities in script writing, patch diffing, bug finding, and other related tasks. I had read many blogs and posts from other security researchers about it, but I still wanted to experiment myself, and...
From time to time, while digging through internals during our research, we stumble upon quirks or vulnerabilities that, although not immediately useful for operations or exploitation, are still noteworthy. Rather than letting these findings fade away, we decided to responsibly disclose them to the vendor. One such case is CVE-2025-53149, a heap-based buffer overflow in the Kernel Streaming WOW Thunk...
In June, during "Patch Tuesday”, Microsoft released a fix for CVE-2024-30078. The severity of this vulnerability was marked as important, with its impact set to Remote Code Execution (RCE). After reading Microsoft’s bulletin, this vulnerability piqued our interest. It seemed plausible for an unauthenticated attacker to send a malicious packet to an adjacent system, which could enable remote...
When I initially interviewed candidates for CF’s Windows Researchers position, one of the challenges I gave out was related to CVE-2024-21338. A Windows Kernel Elevation of Privileges, specifically an Untrusted Pointer Dereference vulnerability in the appid.sys driver. The driver is responsible for the AppLocker technology. Back then, this vulnerability became famous thanks to Avast's beautiful work on the...
