CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 50 Invalid syste...

Lsass-Shtinkering

Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...

CVE-2026-20817

CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Description This repository contains a Proof-of-Concept PoC for CVE-2026-20817 , a local privilege escalation vulnerability in the Windows Error Reporting WER service. The vulnerability allows an authenticated low-privileged...

RpcInvestigator

RPC Investigator Please read our blog post announcement. RPC Investigator RPCI is a .NET/C Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core RPC capabilities of the...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

experiments

Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...

CVE-2017-11783

CVE-2017-11783 1day Exploit by sheisback It isn't complete exploitexec cmd with system privilege, only create file in system32. So you will complete this, need consent.exe uac technique. Reference A view into ALPC-RPC by Clément Rouault & Thomas Imbert, 2017 PacSec...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept demonstrating an information disclosure vulnerability in Microsoft Desktop Window Manager dwm.exe. Overview This repository contains a custom Proof of Concept PoC developed to reproduce CVE-2026-20805, an information disclosure vulnerability affecting the Windo...

sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools version 2. c Google LLC. 2015 - 2024 Developed by James Forshaw This is a small suite of PowerShell tools to test various properties of sandboxes on Windows. Many of the tools take a -ProcessId flag which is used to specify the PID of a sandboxed process. The...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

ALPC-Enumerator

PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...

CVE-2026-20817

🛡️ AI Security Tool Module CVE-2026-20817: Windows Error Reporting WER ALPC Local Privilege Escalation Official Security Audit & Exploitation Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptua...

October "In the Trend of VM" (#32): Windows and Check Point vulnerabilities

October "In the Trend of VM" 32: Windows and Check Point vulnerabilities. Here is the latest edition of Positive Technologies' traditional monthly roundup of trending vulnerabilities. The previous September edition featured six vulnerabilities. This time, there are just two. 🗞 Post on Habr rus 🗒...

About Elevation of Privilege - Windows Advanced Local Procedure Call (ALPC) (CVE-2026-85880) vulnerability

About Elevation of Privilege - Windows Advanced Local Procedure Call ALPC CVE-2026-85880 vulnerability. ALPC is an internal Windows mechanism for high-speed message exchange between processes. It is used by Windows system components. This vulnerability was addressed in the September Microsoft Pat...

Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-85866

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-83917

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-85866

This vulnerability exists in Windows ALPC , where the exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally . The root cause is associated with CWE-497 . The base CVSS 3.1 score is 4.7 (Medium) , reflecting a high ...

EUVD-2026-100261

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-83917

A use after free vulnerability exists in the Windows ALPC component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a High base severity score of 7.0. No specific exploit details or evidence of in-the-wild exploitation are pro...