344 matches found
CVE-2024-30051
Windows DWM Core Library 권한 상승 취약점 CVE-2024-30051 2024년 8월 15일 게시 이 블로그 게시물에서는 Core Impact용 익스플로잇을 개발할 당시 분석했던 Microsoft Windows DWM Core 라이브러리의 취약점에 대해 설명합니다. 이 취약점은 권한이 없는 공격자가 Integrity System 권한을 가진 DWM 사용자로 코드를 실행할 수 있게 합니다 CVE-2024-30051. 당시 익스플로잇을 개발하기에 충분한 공개 정보가 없어서 리버싱을 많이 해야 했습니다. 그래서...
windows-kernel-exploits
windows-kernel-exploits 개요 windows-kernel-exploits 취약점 목록 보안 공지 KB 설명 운영체제 CVE-2021-33739 Microsoft DWM Core Library 권한 상승 취약점 Windows 10, 20 CVE-2021-1732 Windows Win32k 권한 상승 취약점 Windows 10, 2019/20H2 CVE-2020-0787 Windows Background Intelligent Transfer Service 권한 상승 취약점 Windows 7/8/10,...
CVE-2026-62894
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62703
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-61933
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-61932
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2026-56687
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2026-56405
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
EUVD-2026-56349
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
...
EUVD-2026-56338
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-61933
CVE-2026-61933 describes an out-of-bounds read in the Windows DWM Core Library that can allow a locally authorized attacker to disclose information. The CVE entry, with a CVSSv3.1 base score of 5.5 (Medium) and local access requiring low privileges and no user interaction, indicates impact is con...