CVE-2020-17382

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 漏洞利用 感谢 @matteomalvica 针对此漏洞向我提出了大量问题，促使我为他编写了一个针对最新 Windows 10 19041.264 版本的漏洞利用程序——该版本没有 KVA Shadow（即非易受 Specter 漏洞影响的 CPU），也没有 VBS。适配到旧版 Windows 版本十分简单（Matteo 已将其适配到 1709，请查看他的博客文章）。 在易受 CVE-2018-3620 影响的 CPU 上，情况会变得棘手，因为你的 ROP 链会大幅增长以使 PML4...

KVA Shadow: Mitigating Meltdown on Windows

On January 3rd, 2018, Microsoft released an advisory and security updates that relate to a new class of discovered hardware vulnerabilities, termed speculative execution side channels, that affect the design methodology and implementation decisions behind many modern microprocessors. This post...

KVA Shadow: Mitigating Meltdown on Windows

On January 3rd, 2018, Microsoft released an advisory and security updates that relate to a new class of discovered hardware vulnerabilities, termed speculative execution side channels, that affect the design methodology and implementation decisions behind many modern microprocessors. This post...