The Drift Corpus: Ring 0

ndistapi.sys — Uninitialized pool fields passed to TAPI provider callback (CWE-908) fixed

KB5073723

KB published 2026-01-13

pciidex.sys — MMIO BAR mapped executable via deprecated MmMapIoSpace, non-executable protection enforced with MmMapIoSpaceEx (CWE-732) — fixed

KB5073723

KB published 2026-01-13

ahcache.sys — Out-of-bounds read of a version-resource block (CWE-125) in AslpFileMakeStringVersionAttributes fixed

KB5073723

KB published 2026-01-13

b57nd60a.sys — Unvalidated PCI MSI capability offset in raw config-space access (CWE-125) hardened via safe HAL API; low severity, fixed

KB5073723

KB published 2026-01-13

cimfs.sys — signed integer-underflow hardening in CIM image metadata parser (CWE-190) fixed

KB5073724

KB published 2026-01-13

dxgkrnl.sys — DXGSYNCOBJECT refcount integer-overflow guard made unconditional (CWE-190) fixed

KB5075912

KB published 2026-02-10

ndis.sys — WIL feature-staged relocation of per-file-object context free

KB5079473

KB published 2026-03-10

msisadrv.sys — KMDF static-stub rebuild: init-time bounds-check hardening plus stack-init/codegen refactors

KB5094128

KB published 2026-06-09

ndis.sys — WIL feature-staged miniport/interface synchronization, old path retained

KB5095051

KB published 2026-06-09

ndis.sys — feature-staging retirement moving per-handle context free from IRP_MJ_CLEANUP to IRP_MJ_CLOSE

KB5094127

KB published 2026-06-09

http.sys — performance-counter buffer zeroing moved into the callee; sole caller already fully zeroes it

KB5083768

KB published 2026-04-14

http.sys — WIL feature-staging cache bookkeeping bit in wil_details_FeatureStateCache_ReevaluateCachedFeatureEnabledState

KB5095051

KB published 2026-06-09

http.sys — tracing/feature rebuild; trailer parser logic identical

KB5077179

KB published 2026-02-10

intelide.sys — init-only zero-init hardening of PCI IDE enumeration callbacks

KB5094128

KB published 2026-06-09

intelide.sys — Uninitialized PCI-config stack buffers zero-initialized in init-only enumeration callbacks (CWE-908, not attacker-reachable) fixed

KB5087545

KB published 2026-05-12

intelide.sys — init-only PCI-config stack buffers zero-initialized; CWE-908 hardening, not attacker-reachable

KB5082142

KB published 2026-04-14

ksecdd.sys — feature-gated defense-in-depth address-range check in protected-process free path

KB5082123

KB published 2026-04-14

ci.dll — Code Integrity feature-staging graduation

KB5077181

KB published 2026-02-10

ci.dll — defensive termination hardening in SymCrypt ML-DSA rejection samplers

KB5079466

KB published 2026-03-10

ci.dll — servicing feature-flag retirement and SymCrypt library rebuild

KB5089549

KB published 2026-05-12

ci.dll — WIL feature-staging, staged catalog-policy enforcement, and signature-database parser refactor

KB5083769

KB published 2026-04-14

classpnp.sys — zone-command CDB builder unchanged; async dispatch placed behind a registry flag

KB5094128

KB published 2026-06-09

clfs.sys — storage sector-size alignment made unconditional by removing a feature-staging gate

KB5078752

KB published 2026-03-10

cng.sys — defense-in-depth iteration cap in ML-DSA sponge-driven rejection sampling

KB5095051

KB published 2026-06-09

dmvsc.sys — non-security refactor / code reorganization

KB5078752

KB published 2026-03-10

dumpfve.sys — WIL feature-staging framework adds a variant-override value

KB5078752

KB published 2026-03-10

fastfat.sys — CWE-190 guards emitted in both

KB5082142

KB published 2026-04-14

fsdepends.sys — cross-branch recompilation

KB5094128

KB published 2026-06-09

fvevol.sys — no net change

KB5082142

KB published 2026-04-14

fvevol.sys — major OS-build refresh; the one flagged edit adds a pointer test after the pointer is already dereferenced

KB5094128

KB published 2026-06-09

hidparse.sys — input-validation relaxation / recompilation

KB5078752

KB published 2026-03-10

http.sys — feature-staged user-mode-access refactor, legacy path retained

KB5079466

KB published 2026-03-10

http.sys — Known Issue Rollback gate removal

KB5078883

KB published 2026-03-10

http.sys — feature-staged QUIC frame length-check guard, old path retained

KB5083769

KB published 2026-04-14

acx01000.sys — telemetry and feature-staging churn

KB5075912

KB published 2026-02-10

afd.sys — feature-staged abort-state hardening check in AFD SAN request handlers

KB5078938

KB published 2026-03-10

appvstrm.sys — code byte-identical; re-sign and version bump only

KB5073724

KB published 2026-01-13

appvstrm.sys — code-identical rebuild; version bump 10.0.17763.3469 → 10.0.17763.4010

KB5073723

KB published 2026-01-13

appvvemgr.sys — version rebuild and re-sign, 3570 to 3636

KB5073724

KB published 2026-01-13

datascrn.sys — overflow-guard consolidation and allocation-API modernization

KB5073723

KB published 2026-01-13

dfs.sys — interface refactoring

KB5073723

KB published 2026-01-13

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752

KB published 2026-03-10

mup.sys — WIL feature-staging library churn

KB5089549

KB published 2026-05-12

ndiswan.sys — PPP multilink receive return-value / frame-ownership refactor

KB5078752

KB published 2026-03-10

netio.sys — staged iBFT WIL feature-gate removal

KB5077181

KB published 2026-02-10

ntfs.sys — version-drift recompilation; misattributed EDP telemetry

KB5082142

KB published 2026-04-14

pcw.sys — WIL feature-staging finalization in PcwpCloseNotifier

KB5094127

KB published 2026-06-09

ltotape.sys — LTO-9 density code 0x60 support added to GetMediaTypes

KB5078752

KB published 2026-03-10

ltotape.sys — LTO-9 density code 0x60 support added to GetMediaTypes

KB5078752

KB published 2026-03-10

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752

KB published 2026-03-10