CVE-2024-30088

CVE-2024-30088 버그: 버그는 커널이 현재 토큰 객체의 AUTHZBASEPSECURITYATTRIBUTESINFORMATION 을 사용자 모드로 복사할 때 AuthzBasepCopyoutInternalSecurityAttributes 함수 내부에 있으며, 구조체는 다음과 같습니다: root@kitploit: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG SecurityAttributeCount; //0x0 struct LISTENTR...

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc 이 취약점은 NtQueryInformationToken 함수, 특히 AuthzBasepCopyoutInternalSecurityAttributes 함수를 처리할 때 존재하며, 커널이 객체를 조작하는 과정에서 잠금 메커니즘을 부적절하게 관리하는 데서 비롯됩니다. 이러한 실수로 인해 악의적인 개체가 예기치 않게 권한을 상승시킬 수 있습니다. 권한 상승에는 경쟁 상태race condition가 필요하므로 잠시 기다려야 합니다...

EUVD-2025-34325

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

CVE-2025-55696

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088-Windows-poc This vulnerability resides in the...

(Pwn2Own) Microsoft Windows NtQueryInformationToken Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...