KTM_POCS

KTMPOCS 此仓库包含针对 CVE 2024-43570 和 CVE 2024-43535 的报告，这是我在 Windows 内核事务管理器驱动程序 tm.sys 中发现的两个漏洞。 此仓库还包含我在 OffensiveCon25 演示中使用的利用代码：在 Windows 11 KTM 中寻找被忽视的 Cookie 并烘焙针对它们的漏洞利用，作者：Cedric Halbronn 和 Jael Koh。 演示幻灯片可在此处获取。 利用代码已在 Windows 11 Pro 23H2 226321.4169（2024 年 9 月星期二补丁更新）虚拟机上测试通过 时间线 2024 年 4 ...

EUVD-2025-24327

Malicious code in bioql PyPI...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53140

CVE-2025-53140 is a Windows Kernel Transaction Manager use-after-free vulnerability that could allow a locally authenticated attacker to elevate privileges. It affects the Kernel Transaction Manager component of Windows; root cause is a use-after-free flaw enabling local privilege escalation. The...

CVE-2025-53140 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

...

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

Microsoft Kernel Transaction Manager 资源管理错误漏洞

Microsoft Kernel Transaction Manager is a system component of Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Kernel Transaction Manager. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

PT-2025-32807 · Unknown +1 · Kernel Transaction Manager +1

Name of the Vulnerable Software and Affected Versions: Kernel Transaction Manager affected versions not specified Description: A use after free issue exists in the Kernel Transaction Manager. This allows a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is...

Microsoft Windows Kernel Transaction Manager (KTM) is vulnerable to a race condition

Overview The Microsoft Windows Kernel Transaction Manager KTM is vulnerable to a race condition because it fails to properly handle objects in memory, which can result in local privilege escalation. Description CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Rac...

Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack

Microsoft today, on its year-end December Patch Tuesday, released security updates to patch a total 39 vulnerabilities its Windows operating systems and applications—10 of which are rated as critical and other important in severity. One of the security vulnerabilities patched by the tech giant th...

Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)

Executive summary In October 2018, our AEP Automatic Exploit Prevention systems detected an attempt to exploit a vulnerability in the Microsoft Windows operating system. Further analysis led us to uncover a zero-day vulnerability in ntoskrnl.exe. We reported it to Microsoft on October 29, 2018. T...

Microsoft Windows KTM Invalid Free With Reused Transaction GUID

Microsoft Windows KTM Invalid Free with reused transaction GUID ---------------------------------------------------------------------------- CVE-2010-1889 The Kernel Transaction Manager ktm was introduced in Windows Vista and has been included in subsequent versions of Windows. Microsoft describe...