You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve and kev
About this tag
The cve and kev tag on WindowsForum covers discussions around Common Vulnerabilities and Exposures (CVE) and Known Exploited Vulnerabilities (KEV), particularly in the context of Windows security. Recent content highlights the Nightmare Eclipse zero-day incident, where a researcher published weaponized exploit code for a Windows vulnerability, leading to bans from GitHub and GitLab. The thread examines Microsoft's patch timeline, the risk to Windows Defender, and the broader implications for vulnerability disclosure and platform responsibility. This tag is relevant for IT administrators and security professionals tracking active exploits and Microsoft's response to critical CVEs.
Nightmare Eclipse, the Windows zero-day researcher also known as Chaotic Eclipse and Dead Eclipse, was removed from GitHub around May 23 and GitLab on May 26–27, 2026, after publishing weaponized exploit code and threatening a July 14 release aimed at Microsoft. The dispute is now bigger than a...