awesome-windows-exploitation

This is a curated list of Windows Exploitation resources and tools. The list is organized by category, including Windows stack overflows, Windows heap overflows, kernel-based Windows overflows, Windows kernel memory corruption, return-oriented programming, Windows memory protections, bypassing...

The vulnerability of the Windows kernel component of the Windows operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

May 13, 2025—KB5058392 (OS Build 17763.7314)

None None...

PT-2025-34069 · Undefined · Undefined

🔥 Critical & High-Severity CVEs 1. CVE-2025-27461 — Ivanti Connect Secure / Policy Secure Auth Bypass → RCE Severity: Critical 9.8 Vector: Exploitable over the internet; bypasses auth → remote code execution. Why it matters: Actively exploited by ransomware crews; initial access vector. Defender...

PT-2025-34070 · Undefined · Undefined

🔥 Critical & High-Severity CVEs 1. CVE-2025-27461 — Ivanti Connect Secure / Policy Secure Auth Bypass → RCE Severity: Critical 9.8 Vector: Exploitable over the internet; bypasses auth → remote code execution. Why it matters: Actively exploited by ransomware crews; initial access vector. Defender...

The vulnerability of the Windows NT OS Kernel component allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows NT OS Kernel component involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Exploit for Double Free in Microsoft

CVE-2025-49667 — Win32k Privilege Escalation Exploit !Explo...

CVE-2025-53136

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally...

CVE-2025-50168

Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2025-49761

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-53151

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-53151

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-53151

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-53136

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally...

CVE-2025-49761

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-49761

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-53151 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53151 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...