MsSettingsDelegateExecute

MsSettingsDelegateExecute Windows 10/11 x64 で ms-settings の DelegateExecute レジストリキーを使用して UAC をバイパスします。 この Visual Studio プロジェクトは、この問題をテストするための静的 x64 バイナリをコンパイルします。 ライセンス これらのファイルは 3-clause BSD ライセンスの下で利用可能です。...

Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06626)

Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of the broker EditWith feature in Internet Explorer versions 8-11. A remote attacker, initiated via arbitrary application DelegateExecute, can exploit this vulnerability to bypass the...

CVE-2015-6047

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka...

Microsoft Internet Explorer EditWith Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the Application Container and execute code in the context of the logged-in user on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...