CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuerySystemInformation

Source & attribution. This post is an original English rewrite of “Arbitrary Kernel Address Increment via NtQuerySystemInformation (CVE-2026-40369)” by Ori Nimron (@orinimron123), published at pwn2nimron.com. The full exploit source lives at github.com/orinimron123/CVE-2026-40369-EXPLOIT. A shorter news-style coverage was also published by Daily CyberSecurity (securityonline.info). All IDA decompilations, the PoC source, the crash dump, the affected-versions table…

https://core-jmp.org/2026/05/cve-2026-40369-arbitrary-kernel-address-increment/