‘RegPwn’ Windows Registry Vulnerability Enables Full System Access to Attackers

A high-severity Windows vulnerability dubbed “RegPwn” (CVE-2026-24291) is an elevation-of-privilege flaw that allows low-privileged users to gain full SYSTEM access. The MDSec red team discovered the vulnerability and successfully used it in internal engagements since January 2025, before it was addressed in a recent Microsoft Patch Tuesday update. The attack targets the way Windows manages […]

The post ‘RegPwn’ Windows Registry Vulnerability Enables Full System Access to Attackers appeared first on Cyber Security News.