Loading video...

Video Failed to Load

Go Home

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

zeifan's profile picture

nafiez

2,432 subscribers

25,164 views • 2 months ago •via X (Twitter)

Science & Technology
LIVE

Anya Rossi• Live Now

Private livecam show

7 Comments

Herb Page's profile picture
Herb Page2 months ago

which model did you use to find this?

nafiez's profile picture
nafiez2 months ago

Initially found via manual audit and then I throw the rest of analysis to Opus 4.6. It does the job from verifying the bug to PoC.

Mark's profile picture
Mark2 months ago

Why won't they fix? Don't they know how?

nafiez's profile picture
nafiez2 months ago

I have no idea 😅

Dirt Jordan's profile picture
Dirt Jordan2 months ago

I'd call this more than moderate. A deterministic kernel crash over TCP from a Linux box gets moderate severity, no CVE, no bounty. The servicing bar only moves for RCE.

nafiez's profile picture
nafiez2 months ago

Its their decision. We can’t do much from our side 😅

Dirt Jordan's profile picture
Dirt Jordan2 months ago

I'd still call a remote kernel crash over TCP more than moderate. MSRC's bar is RCE-or-bust now. Your writeup proves the real impact.

Related Videos

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)
0:28

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

25,347 views • 1 year ago

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 views • 1 year ago

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK
2:02

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

BBC Breakfast

116,558 views • 3 years ago

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:
2:15

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

McCaulay

292,756 views • 3 years ago

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
8:23

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

nyxgeek

41,729 views • 10 months ago

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [
1:05

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

Yoshua Bengio

15,550 views • 1 month ago

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!
0:47

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

93.7 The Fan

20,297 views • 5 months ago

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!
1:05

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Arcee.ai

21,934 views • 1 year ago

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉
2:34

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

NVIDIA AI Developer

244,885 views • 11 months ago

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!
0:20

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

Dominik Koch

17,125 views • 5 months ago

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!
0:21

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

OpTic Crimsix

525,877 views • 2 years ago

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔
0:42

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Derrick Evans

71,980 views • 5 months ago

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”
0:56

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

Overton

298,258 views • 1 year ago

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence
0:51

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

Emily Campbell ✿

34,946 views • 6 months ago

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube
1:14

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

Sky News

318,017 views • 6 months ago

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️
6:35

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

Guillem Balague

28,979 views • 21 days ago