Microsoft Windows Kernel - 'ATMFD.dll' NamedEscape 0x250C Pool Corruption (MS16-074)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of communication with user-mode applications via an undocumented gdi32!NamedEscape API...

Microsoft Windows - Kernel ATMFD.dll NamedEscape 0x250C Pool Corruption (MS16-074)

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of communication with user-mode...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04197)

Microsoft Windows Server is a popular operating system. A security vulnerability exists in Microsoft Windows Server where the kernel mode driver fails to properly handle objects in memory, allowing a local attacker to exploit the vulnerability for elevated privileges...

CVE-2016-3219

CVE-2016-3219 affects Windows 10 (Gold/1511) kernel-mode Win32k; root cause is a privilege-escalation path via IO Manager/file creation with INPC and IFAC, combined with object-manager shadow directories. Project Zero analysis details an IO flow where INPC disables MemAC/SecAC and OFAC handling g...

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

EUVD-2016-4257

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Microsoft Windows win32k elevation of privilege vulnerability (CNVD-2016-03100)

Microsoft Windows is a series of operating systems released by Microsoft USA. win32k.sys is the kernel part of the Windows subsystem, a kernel-mode device driver, which contains a window manager, background control windows and screen output management. An elevation of privilege vulnerability exis...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-03103)

Microsoft Windows is a series of operating systems released by the American company Microsoft. The vulnerability exists in the Microsoft Windows kernel mode driver. An elevation of privilege vulnerability exists in the Microsoft Windows kernel mode driver, which arises from a program's failure to...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

NVIDIA GPU graphics driver R340 and R352 Kernel Mode Driver layer kernel driver elevation of privilege vulnerability

NVIDIA GPU graphics driver R340 and R352 are both graphics processor GPU drivers for the R340 and R352 series from NVIDIA. A security vulnerability exists in the Escape interface in the Kernel Mode Driver layer of the NVIDIA GPU graphics driver R340 prior to version 341.95 and R352 prior to versi...

NVIDIA GPU graphics driver R340 and R352 Kernel Mode Driver Layer Untrusted Pointer Kernel Driver Vulnerability Vulnerability

NVIDIA GPU graphics driver R340 and R352 are both graphics processor GPU drivers for the R340 and R352 series from NVIDIA. A security vulnerability exists in the Escape interface in the Kernel Mode Driver layer of NVIDIA GPU graphics driver R340 prior to 341.95 and R352 prior to 354.74 for...

NVIDIA GPU graphics driver R340 and R352 Kernel Mode Driver layer elevation of privilege vulnerability

NVIDIA GPU graphics driver R340 and R352 are both graphics processor GPU drivers for the R340 and R352 series from NVIDIA. A security vulnerability exists in the Escape interface in the Kernel Mode Driver layer of the NVIDIA GPU graphics driver R340 prior to 341.95 and R352 prior to 354.74 for...