Here is a secret trick for finding information about windows internals. Prefix your search with "Raymond Chen" So when I did a search for "Raymond Chen" win32

Here is a secret trick for finding information about windows internals. Prefix your search with "Raymond Chen" So when I did a search for "Raymond Chen" win32kfull.sys Near the top of the results was https://www.ragestorm.net/Win32k%20Smash%20the%20Ref.pdf https://www.ragestorm.net/Win32k%20Smash%20the%20Ref.pdf Which seems to provide a nice overview and talk about why there are vulnerabilities there.