cve-2019-1458_POC

CVE-2019-1458: 「in the wildレポート」からPOCへ 12月にKasperskyは、実際の攻撃で使用された0dayエクスプロイトに関するブログ記事1を公開しました。彼らはエクスプロイトの動作を説明していましたが、分析ではPOCを提供していなかったため、興味を引かれました。 そこでKasperskyのブログ記事とパッチ解析に基づいて、この脆弱性のPOCの作成を試みることにしました。 この記事は、その過程をまとめたものです。 情報収集: まず最初に、この脆弱性についてできるだけ多くの情報を集めました。 前述のブログ記事を読んで、以下の情報を得ました:...

PT-2026-70504

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70662

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70506

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A buffer over-read in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70574

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A stack-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program...

PT-2026-70494

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software reads data past the end of the...

PT-2026-70580

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A heap-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

CVE-2026-57095

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally...

CVE-2026-50489

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50416

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-54986

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54112

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54107

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50297

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50670

CVE-2026-50670 is a Windows Win32k elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows kernel. Connected sources confirm local privilege escalation potential and indicate Microsoft has released updates (e.g., KB5099538/KB5099540; MSRC guidance) addressing this issu...

CVE-2026-50416

CVE-2026-50416 is a Win32K information disclosure vulnerability in Windows. The issue allows local disclosure of sensitive data to an attacker with local access (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, Base score 3.3). Microsoft has released updates to address this vulnerability; apply th...