Today I learned about KUSER_SHARED_DATA: a kernel-populated shared page that user mode can read directly. User-mode address User mode reads it at fixed address 0x7FFE0000 (same on x86 and x64). It is …