5104 matches found
Introducing Kernel Data Protection, a new platform security technology for preventing data corruption
Attackers, confronted by security technologies that prevent memory corruption, like Code Integrity CI and Control Flow Guard CFG, are expectedly shifting their techniques towards data corruption. Attackers use data corruption techniques to target system security policy, escalate privileges, tampe...
Windows Kernel Privilege Escalation
The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
Windows Kernel Privilege Escalation
The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
Windows Kernel Privilege Escalation
The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
Windows Kernel Privilege Escalation
The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
Windows Kernel Memory Object Handling
The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to modify, add, or delete data through a specially created application...
Windows kernel bypass security restrictions
The vulnerability of the Windows operating system’s kernel is related to the bypassing of security functions. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...
June 9, 2020—KB4560960 (OS Builds 18362.900 and 18363.900) - EXPIRED
None None...
FF Sandbox Escape (CVE-2020-12388)
By James Forshaw, Project Zero In my previous blog post I discussed an issue with the Windows Kernel’s handling of Restricted Tokens which allowed me to escape the Chrome GPU sandbox. Originally I’d planned to use Firefox for the proof-of-concept as Firefox uses the same effective sandbox level a...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-29550)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...
Microsoft Windows Kernel Security Feature Bypass Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. A security feature bypass vulnerabili...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-31218)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-24902)
Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation.Windows Kernel is one of the Windows kernels. A security vulnerability exists in the Microsoft Windows Kernel that arises from a program not properly handling objects in memory. The vulnerability can b...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-22925)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. A privilege vulnerability exists in...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-22924)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. A privilege vulnerability exists in...