Diff work corpus browser

The Drift Corpus: Ring 0

An open-source corpus of Windows kernel patch diffs — every Microsoft-patched vulnerability reverse-engineered into per-function assembly diffs, root-cause analysis, and reproduction aids.

All posts

2026-03-10 CorpusUnknown

e1i63x64.sys — NDIS OID request-type check already present in both builds; patch relocates OID extraction into a helper

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

fileinfo.sys — RB-tree root pointer-encoding completed, but encoding is disabled on every reachable path

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

intelpep.sys — idle-state reporting refactor and device/processor struct-layout revision

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ipfltdrv.sys — recompilation: register allocation and basic-block scheduling

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

irenum.sys — redundant zero-init of registry-path pool buffer

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

kbdhid.sys — IRP_MJ_CREATE device-name string correction, no authorization change

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

kdnic.sys — NDIS poll-model + WDF refactor

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ltotape.sys — LTO-9 density code 0x60 support added to GetMediaTypes

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ltotape.sys — LTO-9 density code 0x60 support added to GetMediaTypes

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

microsoft.bluetooth.legacy.leenumerator.sys — child-list enumeration refactor and trace-only updates

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

monitor.sys — brightness dim-state telemetry instrumentation and recompilation churn

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

mpio.sys — PERSISTENT_RESERVE_IN passive-deferral classification refactor

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

mqac.sys — compiler inlining of user-mode pointer probes; no probe direction or size altered

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

msseccore.sys — recompile with a redundant field zero and an integrity-check flag-constant tweak

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

mssecwfp.sys — feature-staged WFP filter-condition matching rollout with the old comparison path retained

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

mup.sys — WIL feature-staged UNICODE_STRING length adjustment in the mailslot-request telemetry path

KB5079473
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

mup.sys — WIL feature-staging library churn

KB5079466
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ndis.sys — per-processor slot free loop is a compiler codegen difference

KB5079466
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ndis.sys — feature-staged deferral of per-open context free from Cleanup to Close

KB5078885
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

ndiswan.sys — PPP multilink receive return-value / frame-ownership refactor

KB5078752
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

netio.sys — feature-gated audit-mode registry robustness bugfix, old path retained

KB5079473
KB published 2026-03-10

Argus
2026-03-10 CorpusUnknown

netio.sys — WIL feature-staging graduation and compiler inlining

KB5079466
KB published 2026-03-10

Argus
2026-02-10 CorpusUnknown

dxgmms2.sys — feature-staged reference-count balancing gated behind disabled-by-default servicing flags

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

ksrext.sys — KSR persistence-subsystem feature expansion, no reachable vulnerability

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mqac.sys — cross-branch rebuild; validation inlined from callees

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mrxsmb10.sys — WIL feature-staging rollout of server-transport reference validation

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mrxsmb20.sys — WIL feature-staging / telemetry churn

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mrxsmb.sys — reparse-tag classification tweak and SMB-over-QUIC teardown feature-staging

KB5075941
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mrxsmb.sys — connection-info parser refactor and alternative-port feature staging

KB5077179
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mrxsmb.sys — WIL feature-flag graduation in SMB negotiate

KB5077181
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

mssecwfp.sys — WFP guard-policy struct layout revision and gated comparison-mode addition

KB5075912
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

ndis.sys — feature-staged power-management refactor, guard identical in both builds

KB5077179
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

netio.sys — staged iBFT WIL feature-gate removal

KB5077181
KB published 2026-02-10

Argus
2026-02-10 CorpusUnknown

nwifi.sys — WIL feature-usage reporting cache dedup guard

KB5075912
KB published 2026-02-10

Argus
2026-01-13 CorpusUnknown

acpials.sys — KMDF framework stub library rebuild

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

ci.dll — added ETW telemetry field to three Code Integrity events

KB5073455
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

i8042prt.sys — version-churn diff; keyboard-hook IOCTL handler identical in both builds

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

ialpss2i_i2c.sys — hardware-support gate relaxed in CheckSupportedHardware

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

ialpss2i_i2c_bxt_p.sys — compiler codegen refactor of identical I2C command / RX-FIFO-threshold logic

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

ialpssi_i2c.sys — I2C spike-suppression register programming added; speed-mode writes refactored per mode

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

kbldfltr.sys — modifier-key state-tracking feature, lock-scope refactor, and debug tracing

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

mrxsmb.sys — WIL feature-staged endpoint-reference path and telemetry

KB5073724
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

mrxsmb.sys — defensive hardening of SMB-over-QUIC connection-parameter buffer handling

KB5074109
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

msdsm.sys — toolchain rebuild; DsmInquire allocation/copy logic identical in both builds

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

msgpioclx.sys — PoFx registration structure layout/version update

KB5073723
KB published 2026-01-13

Argus
2026-01-13 CorpusUnknown

mup.sys — WIL feature-staging gate removed from UNC hardening prefix-table packing

KB5074109
KB published 2026-01-13

Argus