2977 matches found
CVE-2020-0624
CVE-2020-0624 win32k use-after-free poc...
cve-2019-1458_POC
CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild1. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to t...
CVE-2022-21882
CVE-2022-21882 win32k LPE bypass CVE-2021-1732 only tested on windows 20h2 19042.1415 https://twitter.com/kalendsi/status/1483770845138804738...
CVE-2022-21882
CVE-2022-21882 Win32k Elevation of Privilege Vulnerability For Windows 10 21H2 Only...
CVE-2019-0803
CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot 效果图 Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...
CVE-2019-0803
CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot 效果图 Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...
CVE-2021-1732
Windows Privilege Escalation Exploit for CVE-2021-1732 Win32k - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors @Exploit Blizzard Vulnerability Description A vulnerability exists within win32k that can be leveraged by an attacker ...
CVE-2016-3308
Usar CVE-2016-3308 para corromper el desktop heap de win32k autor : @55-AA, 18 de septiembre de 2016 Introducción El desktop heap es un pool del kernel usado por win32k; puede ser explotado por una aplicación en modo usuario. A continuación describiré en detalle cómo implementar una explotación...
windows-kernel-exploits
windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...
CVE-2022-21882
CVE-2022-21882 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...
CVE-2016-0040
CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...
CVE-2022-21882
CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...
CallbackHell
CallbackHell Exploit for CVE-2021-40449 Win32k - LPE CallbackHell Description Technical Writeup PoC References Description CVE-2021-40449 is a use-after-free in Win32k that allows for local privilege escalation. The vulnerability was found in the wild by Kaspersky. The discovered exploit was...
CVE-2016-7255
CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...
CVE-2015-1701
CVE-2015-1701 Win32k Elevation of Privilege Vulnerability. Original info https://www.fireeye.com/blog/threat-research/2015/04/probableapt28useo.html Protection Apply MS15-051 for fix. https://technet.microsoft.com/library/security/MS15-051 CVE Dictionary Entry: CVE-2015-1701 NVD Published Date:...
CVE-2015-1701
CVE-2015-1701 Win32k Elevation of Privilege Vulnerability. Original info https://www.fireeye.com/blog/threat-research/2015/04/probableapt28useo.html Protection Apply MS15-051 for fix. https://technet.microsoft.com/library/security/MS15-051 Authors c 2015 CVE-2015-1701 Project Credits R136a1...
CVE-2021-1732
CVE-2021-1732 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...
kernelmode-driver
kernelmode-driver Kernel Driver for x64 Window System which allows you to read/write Virtual/Physical Memory hooking Win32k Info: I tried to keep the project as clean as possible so I adapted Microsoft Syntax for Kernel Mode functions KE Mostly used "conventional" data types like void instead of...
CVE-2026-50416-writeup-and-poc
CVE-2026-50416: One QWORD Too Many in the Desktop Heap On Windows 11 Insider build 10.0.28020.2149, the user mode mapping of the Win32k desktop heap exposed a raw kernel session pool pointer at offset 0x100. The read itself is almost offensively small: ULONG64 leaked = ULONG64 desktopheap + 0x100...
