182 matches found
CVE-2023-36802-MSKSSRV-LPE
CVE-2023-36802 MSKSSRV.sys 本地权限提升 CVE-2023-36802 的 PoC,针对 Microsoft Kernel Streaming Service Proxy,该组件存在类型混淆漏洞。 该概念验证基于 Benoît Sevens @benoitsevens 的文章。文章地址:https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-36802.html 原始漏洞利用及分析由 Valentina Palmiotti @chompie1337 完成。...
HVCIPwned
CVE-2024-35250 通过 Windows 内核流驱动程序(ks.sys)中的不可信指针解引用实现本地权限提升。纯数据利用 — 绕过虚拟机监控程序保护的代码完整性(HVCI)。 摘要 字段| 详情 ---|--- CVE| CVE-2024-35250 组件| ks.sys(内核流) 漏洞类型| 不可信指针解引用 影响| 权限提升至 NT AUTHORITY\SYSTEM HVCI| 已绕过 — 内核中无代码执行 补丁| KB5039212(2024年6月) 受影响系统| Windows 10 20H1+ / Windows 11 21H2-23H2 漏洞...
CVE-2026-69275
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...
EUVD-2026-73433
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69275
CVE-2026-69275 is a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver that allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector , high complexity...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
📄 Microsoft Windows 10 Famille 10.0.19045.5487 DLL Hijacking
Microsoft Windows 10 Famille version 10.0.19045.5487 suffers from a DLL hijacking vulnerability that enables privilege escalation. ============================================================================================================================================= | Title : Microsoft...
EUVD-2024-37209
Malicious code in bioql PyPI...
EUVD-2025-6349
Malicious code in bioql PyPI...
EUVD-2024-37160
Malicious code in bioql PyPI...
EUVD-2025-24319
Malicious code in bioql PyPI...
EUVD-2024-37094
Malicious code in bioql PyPI...
EUVD-2025-2438
Malicious code in bioql PyPI...
EUVD-2024-37203
Malicious code in bioql PyPI...
EUVD-2024-37204
Malicious code in bioql PyPI...
EUVD-2024-37207
Malicious code in bioql PyPI...