CVE-2023-21772

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23...

CVE-2023-21772

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-21772 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-21772 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-21772

CVE-2023-21772 is a Windows kernel EoP rooted in the registry’s security descriptor lifecycle. The registry virtualization path could free the old security descriptor and then attempt to allocate a new one; if allocation failed, the key could be left without a security descriptor, violating memor...