CVE-2024-20698

CVE-2024-20698 Acerca de esta vulnerabilidad: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698 Análisis del parche En ntoskrnl.exe tenemos dos funciones parcheadas: sub1406AE224 y WbAddLookupEntryEx. La función vulnerable es WbAddLookupEntryEx. Rutas a esta función: Para llama...

CVE-2026-40369-EXPLOIT

Blog completo - https://pwn2nimron.com/blog CVE-2026-40369: Incremento de Dirección de Kernel Arbitrario a través de NtQuerySystemInformation Clase 253 Resumen Tipo: Escritura de kernel arbitraria incremento — PRIMITIVA DE ESCALACIÓN DE PRIVILEGIOS Componente: ntoskrnl.exe —...

CVE-2025-62215_analysis

Análisis de Vulnerabilidad CVE-2025-62215 Proyecto de investigación de vulnerabilidad para escalada de privilegios por Race Condition / Double-Free en el kernel de Windows. Resumen Elemento| Detalle ---|--- CVE| CVE-2025-62215 Componente| Windows Kernel ntoskrnl.exe Tipo| Race Condition CWE-362 /...

Windows-exploit-suggester

windows-exploit-suggester.ps1 A local privilege-escalation L...

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2024-20698 About this vulnerability: https://msrc.microsof...

Exploit for Use After Free in Microsoft

CVE-2021-40449 More info here: https://kristal-g.github.io/20...

The vulnerability of the ntoskrnl.exe file in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ntoskrnl.exe file in operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2021-3304

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to errors in privilege management in the Windows Kernel, specifically affecting the ntoskrnl.exe file. This can allow an attacker to gain unauthorized access to...

SysWhispers2 - AV/EDR Evasion Via Direct System Calls

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference BetweenSysWhispers 1 and 2 The usage is almost identical to SysWhispers1 but...

Microsoft Windows 7 SP1 x86 - GDI Palette Objects Local Privilege Escalation (MS17-017) Exploit

Exploit for windows platform in category local exploits E-DB Note: + Source: https://github.com/sensepost/gdi-palettes-exp + Binary: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/42432.exe include include include include //From...

Microsoft Windows - 'win32k!NtGdiExtGetObjectW' Kernel Stack Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory in Windows 7-10 through the win32k!NtGdiExtGetObjectW system call accessible via a documented GetObject API function to user-mo...

Microsoft Windows - IOCTL_DISK_GET_DRIVE_LAYOUT_EX Kernel partmgr Pool Memory Disclosure

Microsoft Windows - IOCTLDISKGETDRIVELAYOUTEX Kernel partmgr Pool Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1159 We have discovered that the handler of the IOCTLDISKGETDRIVELAYOUTEX IOCTL in partmgr.sys discloses portions of uninitialized pool memory to...

Microsoft Windows - 'IOCTL_DISK_GET_DRIVE_LAYOUT_EX' Kernel partmgr Pool Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1159 We have discovered that the handler of the IOCTLDISKGETDRIVELAYOUTEX IOCTL in partmgr.sys discloses portions of uninitialized pool memory to user-mode clients. The issue can be reproduced by running the attached...

Microsoft Windows - IOCTL_DISK_GET_DRIVE_LAYOUT_EX Kernel partmgr Pool Memory Disclosure Exploit

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1159 We have discovered that the handler of the IOCTLDISKGETDRIVELAYOUTEX IOCTL in partmgr.sys discloses portions of uninitialized pool memory to user-mode clients. The issue can...

Microsoft Windows - IOCTL_DISK_GET_DRIVE_GEOMETRY_EX Kernel partmgr Pool Memory Disclosure

Microsoft Windows - IOCTLDISKGETDRIVEGEOMETRYEX Kernel partmgr Pool Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1156&desc=2 We have discovered that the handler of the IOCTLDISKGETDRIVEGEOMETRYEX IOCTL in partmgr.sys discloses portions of uninitialized poo...

Microsoft Windows Kernel Information Disclosure Vulnerability (3199709)

This host is missing an important security update according to Microsoft Bulletin MS16-152 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows10 Mount Point Mitigation & MS15-0 9 0 bypass-vulnerability warning-the black bar safety net

Symbolic Link vulnerability simple background description Symbolic Link is the Microsoft Windows System on one of the key mechanisms, from Windows NT3. 1 Introduction objects, and registry Symbolic Link, Microsoft from the Windows 2000 start also introduced the NTFS Mount Point and Directory...

Microsoft Windows Kernel Information Disclosure Vulnerability (2839229)

This host is missing an important security update according to Microsoft Bulletin MS13-048. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-017: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2799494)

The Windows kernel on the remote host has the following vulnerabilities : - Multiple race condition vulnerabilities exists. CVE-2013-1278, CVE-2013-1279 - A reference count vulnerability exists. CVE-2013-1280 A local attacker could exploit any of these vulnerabilities to elevate privileges. C...

MS12-068: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2724197)

The remote host is running a Windows kernel version that is affected by an integer overflow vulnerability. A local attacker could exploit this to execute arbitrary code with elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62463; scriptversion"1.9"...