CVE-2025-50168-pwn2own-berlin-2025

著者: D4m0n CVE-2025-50168 これは Pwn2Own Berlin 2025 - LPEカテゴリー に提出されたエクスプロイトです。 脆弱性は Win32kbase!DirectComposition に存在し、詳細はブログ記事で確認できます。 謝辞 kASLRバイパス技術: prefetch-tool（carrotc4k3 作） 特別な感謝: Out of Bounds の David 氏と Louis 氏 免責事項 このリポジトリは教育および研究目的のみに使用され、悪意のある目的で使用してはなりません。無許可または違法な活動へのマテリアルの使用は固く禁止されていま...

SCTT-2026-33-0002-DWM-Visual-Field-Singularity

SCTT-2026-33-0002: DWM 視覚野特異点 📡 理論的分類 ID: SCTT-2026-33-0002 研究者: Americo Simoes SimoesCTT 物理学: 定理4.2 - 乱流相転移 TPT 定数: α = 0.0302011 標的: デスクトップウィンドウマネージャー dwm.exe / Windows グラフィックスコンポーネント 置き換え: CVE-2026-20805 & CVE-2026-20871 Visual-Latch パッチ 🚀 概要 SCTT-2026-33-0002 は視覚野特異点 を武器化します。マイクロソフトの最新パッチは AL...

-SCTT-2026-33-0002-DWM-Visual-Field-Singularity

SCTT-2026-33-0002: DWM 視覚野特異点 📡 理論的分類 ID: SCTT-2026-33-0002 研究者: Americo Simoes SimoesCTT 物理学: 定理4.2 - 乱流相転移 TPT 定数: α = 0.0302011 対象: デスクトップウィンドウマネージャー dwm.exe / Windows グラフィックスコンポーネント 置き換え: CVE-2026-20805 & CVE-2026-20871 Visual-Latch パッチ 🚀 概要 SCTT-2026-33-0002 は視覚野特異点 を兵器化します。マイクロソフトの最新パッチは AL...

EUVD-2022-44002

Malicious code in bioql PyPI...

EUVD-2022-44001

Malicious code in bioql PyPI...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

CVE-2022-40733 is a kernel vulnerability in Windows DirectComposition via the win32kbase.sys driver. The TALOS report details a NULL pointer dereference in DirectComposition GetWeakReferenceBase due to a mis-managed weak-reference flag in the resource marshaler lifecycle, triggered when certain f...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40732

CVE-2022-40732 affects Microsoft Windows DirectComposition in the win32kbase.sys driver (Windows 11 10.0.22000.593; Windows Server 2022 10.0.20348.643). Talos details a NULL pointer dereference in DirectComposition::CCompositionSurfaceBitmapMarshaler when setting integer property 0x3, which leads...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733: NULL Pointer Dereference

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

PT-2024-11634 · Microsoft · Windows 11 +1

Name of the Vulnerable Software and Affected Versions: Windows 11 version 10.0.22000.593 Windows Server 2022 version 10.0.20348.643 Description: An access violation vulnerability exists in the DirectComposition functionality of the win32kbase.sys driver. A specially-crafted set of syscalls can le...

CVE-2022-40732: NULL Pointer Dereference

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

(0Day) Microsoft Windows DirectComposition Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...