CVE
CVE-2026-46215
drm: Set old handle to NULL before prime swap in change_handle
Exploitation IoCs 5
Filename Kuailian VPN
Filename Kuailian VPN.msi
Filename node.exe
Package Braintree.Net
Package Jscrambler
MITRE ATT&CK TTPs 30
T1021.001 T1021.003 T1055 T1056.001 T1059.001 T1071.001 T1071.004 T1082 T1083 T1098 T1105 T1110 T1114 T1120 T1132 T1133 T1190 T1202 T1210 T1484.001 T1490 T1491 T1542 T1543.003 T1557 T1566 T1573 T1588.001 T1595 T1659
Remote Desktop Protocol
Lateral Movement
Distributed Component Object Model
Lateral Movement
Process Injection
Defense Evasion
Keylogging
Collection
PowerShell
Execution
Web Protocols
Command And Control
DNS
Command And Control
System Information Discovery
Discovery
File and Directory Discovery
Discovery
Account Manipulation
Persistence
Ingress Tool Transfer
Command And Control
Brute Force
Credential Access
Email Collection
Collection
Peripheral Device Discovery
Discovery
Data Encoding
Command And Control
External Remote Services
Persistence
Exploit Public-Facing Application
Initial Access
Indirect Command Execution
Defense Evasion
Exploitation of Remote Services
Lateral Movement
Group Policy Modification
Defense Evasion
Inhibit System Recovery
Impact
Defacement
Impact
Pre-OS Boot
Defense Evasion
Windows Service
Persistence
Adversary-in-the-Middle
Credential Access
Phishing
Initial Access
Encrypted Channel
Command And Control
Malware
Resource Development
Active Scanning
Reconnaissance
Content Injection
Initial Access