kernel exploitation
Exploiting CVE-2025-62215: A Reference-Count Race in the Object Manager
A deep-dive into CVE-2025-62215 — an actively exploited race in ntoskrnl's Object Manager that double-frees the token's SID Values Block, reclaimed with a same-bucket spray and pivoted into a data-only token flip for SYSTEM.