CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc This vulnerability exists in the NtQueryInformationToken function, specifically when handling the AuthzBasepCopyoutInternalSecurityAttributes function. It originates from improper management of the locking mechanism by the kernel when operating on objects. This flaw cou...

CVE-2024-30088

CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: root@kitploit: //0x30 bytes sizeof struct...

The vulnerability of the NtQueryInformationToken function (ntifs.h) in Windows operating systems, which allows a hacker to escalate their privileges

The vulnerability of the NtQueryInformationToken function in the ntifs.h header of Windows operating systems is related to synchronization errors when using common resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

EUVD-2025-34325

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

CVE-2025-55696

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088-Windows-poc This vulnerability resides in the...

(Pwn2Own) Microsoft Windows NtQueryInformationToken Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...