ACROS Security

ACROS Security research lab is specialized in providing profound security analyses of products and systems.
Mastodon: @[email protected]

[ACROS Security @AcrosSecurity]

Dear 0patch family, we've launched 0patch PRO, a new plan for professional computer users and organizations. 0patch remains FREE for personal and non-profit educational use, but some future patches will only be provided to PRO users. https://t.co/FBZlPS5Orw

[0patch @0patch]

We'd like to thank Maor Dahan (https://t.co/SDCCwQ3iu1) with @akamai_research for sharing their analysis, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft - and for those with broken official patches.

[0patch @0patch]

Broken official patches for Windows Shell Spoofing Vulnerability (CVE-2026-32202)
https://t.co/7L7TgbwvjQ

[Mitja Kolsek @mkolsek]

Just a reminder that on Windows, the original software vendor does not have a monopoly on patching their vulnerabilities.

[0patch @0patch]

Dropping a 0day? Consider having it 0patched first.
https://t.co/UCX99nSpBS

[0patch @0patch]

We'd like to thank @AretiqAI for sharing their analysis and proof of concept, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.

[0patch @0patch]

Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)
https://t.co/lvwQyIaCRc

[0patch @0patch]

We'd like to thank TrustedSec researcher Christopher Paschen (@freefirex2) for sharing the details and their proof-of-concept, which allowed us to create a patch for Windows users who are no longer receiving official Windows patches.

[0patch @0patch]

Micropatches released for Windows Shell Link Processing Spoofing Vulnerability (CVE-2026-25185)
https://t.co/thlOxlGOYC

[0patch @0patch]

We'd like to thank Google Project Zero security researcher James Forshaw (https://t.co/d8IwevR7sN) and MDSec's Filip Dragovic (@filip_dragovic) for publishing their analyses and proofs-of-concept, which allowed us to create a patch for legacy Windows users.

[0patch @0patch]

Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://t.co/dabuY7TV06

[0patch @0patch]

We'd like to thank Sergey Bliznyuk (@justbronzebee ) with Positive Technologies for sharing their detailed article, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.

[0patch @0patch]

Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2026-20931)
https://t.co/FRh5qn00n9

[0patch @0patch]

We'd like to thank Denis Faiustov and Ruslan Sayfiev with GMO Cybersecurity by Ierae for finding this vulnerability, and Clément Labro (@itm4n) for publishing their analysis and proof-of-concept, which allowed us to create a patch for legacy Windows users.

[0patch @0patch]

Micropatches released for Windows Error Reporting Service Elevation of Privilege Vulnerability (CVE-2026-20817)
https://t.co/g1HFVJn2X5

[0patch @0patch]

Micropatches released for Windows Shell Security Feature Bypass Vulnerability (CVE-2026-21510) https://t.co/49LNaQZJLk

[0patch @0patch]

We'd like to thank Oscar Zanotti Campo (https://t.co/nyrkEx3AYv) for sharing their analysis and proof-of-concept, which allowed us to create a patch and protect 0patch users against this issue.

[0patch @0patch]

Micropatches released for Windows Storage Elevation of Privilege Vulnerability (CVE-2026-21508) https://t.co/EoFjy4z02s

[0patch @0patch]

We'd like to thank Tianlin Zhang (@T0Zhang) for discovering this vulnerability and Clément Labro (https://t.co/g9zU5JYYjJ) for publishing their analysis, both of which allowed us to create a patch and protect 0patch users against this issue.

[0patch @0patch]

Micropatches released for Arbitrary Registry Key Delete As Local System With Consolidator Scheduled Task (CVE-2025-59512) https://t.co/uFCPPU1Mfk

[0patch @0patch]

We'd like to thank SSD Secure Disclosure (@SecuriTeam_SSD) for discovering this vulnerability and publishing their analysis, which allowed us to create a patch and protect 0patch users against this issue.