Windows 11 security bypassed remotely via RAM chip exploit

Researchers demonstrated that Windows 11's strongest security defenses can be bypassed remotely by software alone, without physical access to the target computer, according to a study presented at USENIX Security Symposium 2026. The attack exploits unprotected configuration chips on certain consumer RAM modules from Corsair, G.Skill, and ADATA, tricking the system into recognizing double the actual memory and accessing protected areas. The team automated the process, disabling antivirus and corporate management controls. Microsoft acknowledged the issue as CVE-2026-23670 and released mitigations in April 2026 updates. Systems with Secure Boot enabled remain protected, while the research highlights how hardware layer vulnerabilities can undermine operating system security guarantees.