KTM_POCS

KTMPOCS This repo contains reports for CVE 2024-43570 and CVE 2024-43535, two vulnerabilities I found in the Windows Kernel Transaction Manager driver tm.sys. This repo also contains exploit code I used for the demos in the OffensiveCon25 Presentation: Hunting for Overlooked Cookies in Windows 11...

EUVD-2025-24327

Malicious code in bioql PyPI...

Kernel Transaction Manager Privilege Escalation

The vulnerability of the Kernel Transaction Manager in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

...

CVE-2025-53140

CVE-2025-53140 is a Windows Kernel Transaction Manager use-after-free vulnerability that could allow a locally authenticated attacker to elevate privileges. It affects the Kernel Transaction Manager component of Windows; root cause is a use-after-free flaw enabling local privilege escalation. The...

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

Microsoft Kernel Transaction Manager 资源管理错误漏洞

Microsoft Kernel Transaction Manager is a system component of Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Kernel Transaction Manager. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

PT-2025-32807 · Unknown +1 · Kernel Transaction Manager +1

Name of the Vulnerable Software and Affected Versions: Kernel Transaction Manager affected versions not specified Description: A use after free issue exists in the Kernel Transaction Manager. This allows a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is...

CVE-2025-53140: Use After Free

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows Kernel Transaction Manager (KTM) is vulnerable to a race condition

Overview The Microsoft Windows Kernel Transaction Manager KTM is vulnerable to a race condition because it fails to properly handle objects in memory, which can result in local privilege escalation. Description CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Rac...

Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack

Microsoft today, on its year-end December Patch Tuesday, released security updates to patch a total 39 vulnerabilities its Windows operating systems and applications—10 of which are rated as critical and other important in severity. One of the security vulnerabilities patched by the tech giant th...

Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)

Executive summary In October 2018, our AEP Automatic Exploit Prevention systems detected an attempt to exploit a vulnerability in the Microsoft Windows operating system. Further analysis led us to uncover a zero-day vulnerability in ntoskrnl.exe. We reported it to Microsoft on October 29, 2018. T...

Microsoft Windows KTM Invalid Free With Reused Transaction GUID

Microsoft Windows KTM Invalid Free with reused transaction GUID ---------------------------------------------------------------------------- CVE-2010-1889 The Kernel Transaction Manager ktm was introduced in Windows Vista and has been included in subsequent versions of Windows. Microsoft describe...