218 matches found
cve-2019-1458_POC
CVE-2019-1458：从“在野利用报告”到 POC 简介 12月，卡巴斯基发布了一篇关于被在野利用的0day漏洞1的博客文章。这引起了我的兴趣，因为尽管他们描述了该漏洞利用的工作原理，但他们的分析中没有提供任何 POC。 这就是为什么我决定尝试基于卡巴斯基的博客文章和补丁分析来为这个漏洞编写 POC。 这篇文章描述了我这样做的过程。 信息收集： 第一件事是尽可能多地收集有关此漏洞的信息。 阅读上述博客文章后，我提取了以下信息： 该漏洞与窗口切换功能有关 触发需要模拟按下 ALT 键 需要两次调用未文档化的 NtUserMessageCall API 需要创建一个特殊的切换窗口...
CVE-2026-70283
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69853
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69832
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69792
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
CVE-2026-69779
Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69762
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69706
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69689
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69652
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69610
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69609
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69498
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69410
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69348
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69333
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69301
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69274
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
