Concealed Position - Bring Your Own Print Driver Privilege Escalation Tool

Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install printer drivers. C...

Metasploit Wrap-Up

Print Driver PrivEsc If you attended DEF CON last week, you may have seen this talk on print driver vulnerabilities from Metasploit community contributor Jacob Baines. In the spirit of Friday the 13th, we're highlighting some of these "print nightmares" again, in the form of two new Metasploit...

CVE-2021-38085

creationtimestamp| type| source ---|---|--- 2021-08-11 20:12:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/canondriverprivesc.rb 2021-08-11 22:38:39+00:00| seen| https://t.me/cibsecurity/27184 2021-08-20 02:37:24+00:00|...

CVE-2021-38085

CVE-2021-38085 – Canon TR150 print driver privilege escalation is a local vulnerability affecting Canon TR150 driver versions up to 3.71.2.10. During printer installation, an attacker can overwrite CNMurGE.dll in CanonBJ%PROGRAMDATA% and, if timed correctly, the DLL is loaded by the system proces...