CVE-2023-23420

creationtimestamp| type| source ---|---|--- 2023-03-14 19:23:25+00:00| seen| https://t.me/cibsecurity/59990 2023-04-08 17:23:56+00:00| published-proof-of-concept| Telegram/IlZBowUfOcjN5gg3PFQxnqtrh3VZ0A7x1GkPzaAIStVh1I 2023-04-13 18:02:40+00:00| published-proof-of-concept|...

CVE-2023-23420

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-23420 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...