Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 Local Privilege Escalation POC authors: chompie For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Adapting the exploit to all vulnerable systems is left as an exercise to the reader. Git gud, etc. Usage: WindowsMSKSSRVLPECVE-2023-6802.ex...

Auto-Elevate

Auto-Elevate このツールは、UACバイパスやWindowsの組み込み機能の力を示しています。このユーティリティはwinlogon.exeを自動的に特定し、そのプロセスのTOKENを奪取して偽装し、奪取したトークンで新しいSYSTEMレベルのプロセスを生成します。hfiref0xのUACMEユーティリティのUACバイパス方法 41 ICMLuaUtil UAC バイパス と組み合わせることで、このユーティリティは低特権のAdministratorアカウントからNT AUTHORITY\SYSTEMへ自動昇格できます。...

CVE-2014-4076

CVE-2014-4076 PoC 该概念验证直接从其原始Python版本复制，并用C++重写。 构建 本项目使用Visual Studio 2013 Update 4构建。 注意 只有属于管理员组的用户才能打开设备并执行IO控制，这意味着该漏洞利用仅能将管理员提升为SYSTEM，在webshell环境中完全无效 。 特别感谢@KingsleyChen的帮助。...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 POC de escalada de privilegios local autores: chompie & b33f Solo con fines de demostración. El exploit completo funciona en sistemas vulnerables de Windows 11 22H2. La primitiva de escritura funciona en todos los sistemas vulnerables. Uso: WindowsAFDLPECVE-2023-21768.exe donde es ...

CVE-2023-21768

CVE-2023-21768 本地权限提升 POC 作者：chompie 和 b33f 仅用于演示目的。完整漏洞利用可在存在漏洞的 Windows 11 22H2 系统上运行。 写入原语适用于所有存在漏洞的系统。 用法： WindowsAFDLPECVE-2023-21768.exe 其中 是要提升权限的进程的进程 ID（十进制）。 最终应使目标进程被提升至 SYSTEM 权限。 https://user-images.githubusercontent.com/86009160/224833738-5d6ca2be-fb1d-4d92-85b3-ad1cb1a28472.mp4...

Driver-RW

Driver-RW 通过 CVE-2018-19321 提升至 NT AUTHORITY\SYSTEM 已在 WIndows 10 v1511 上测试...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP !CV...

Amazon WorkSpaces 安全漏洞

Amazon WorkSpaces is a fully managed, persistent desktop virtualization service provided by Amazon, Inc. It allows your users to access the data, applications, and resources they need from any supported device, at any time. Versions of Amazon WorkSpaces prior to 2.6.2034.0 contained a security...

EUVD-2026-26423

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

PT-2026-4514

Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...

CVE-2025-53841

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location th...

PT-2025-48814

Name of the Vulnerable Software and Affected Versions Akamai Guardicore Platform Agent versions prior to 50.15.0 Akamai Guardicore Platform Agent versions prior to 51.12.0 Akamai Guardicore Platform Agent versions prior to 52.1.1 Description The Akamai Guardicore Platform Agent has a flaw that...

memoQ 安全漏洞

memoQ is a computer-assisted translation software from the Hungarian company memoQ. A security vulnerability exists in memoQ 10.1.13.ef1b2b52aae and earlier versions, which stems from an unquoted service path and could allow a local user to achieve elevation of privilege to SYSTEM by placing a...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-59273

Azure Event Grid System Elevation of Privilege vulnerability (CVE-2025-59273) arises from improper access control, enabling a network-based, unauthenticated attacker to elevate privileges. Affected component: Azure Event Grid System in Microsoft Azure; root cause: access control misconfiguration ...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

sudo: LPE via host option

A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...

CVE-2023-21042

In TBD of TBD, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/...