I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details.