Windows Exploitation Techniques: Dangling COM Object Registrations
Summary
The article analyzes how a dangling COM object registration on Windows can lead to privilege escalation, tied to CVEs 2026-66804 and 2026-50343. It explains a technique using custom COM marshaling to load a DLL into a privileged process and outlines practical steps and mitigations.