CVE-2025-50168-pwn2own-berlin-2025

Autor: D4m0n CVE-2025-50168 Este es un exploit presentado a Pwn2Own Berlin 2025 - Categoría LPE. La vulnerabilidad ocurre en Win32kbase!DirectComposition, y se pueden encontrar más detalles en la publicación del blog. Agradecimientos Técnica de bypass de kASLR: prefetch-tool por carrotc4k3...

CVE-2021-40449_poc

CVE-2021-40449 Más información aquí: https://kristal-g.github.io/2021/11/05/CVE-2021-40449POC.html Compilación Hice un pequeño apaño con la librería MinHook para que soporte de forma algo parcial el Platform Toolset de 2019. Por eso incluí los archivos lib en este repositorio. Adaptación a...

Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

(Pwn2Own) Microsoft Windows win32kbase Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

(0Day) Microsoft Windows DirectComposition Out-Of-Bounds Read Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Microsoft Windows win32kbase!NtQueryCompositionInputQueueAndTransform Kernel Stack Memory Disclosure

The win32k!NtQueryCompositionInputQueueAndTransform system call may disclose portions of uninitialized kernel stack memory to user-mode clients on Windows 10. Windows Kernel stack memory disclosure in win32kbase!NtQueryCompositionInputQueueAndTransform We have discovered that the...