CVE-2025-50168-pwn2own-berlin-2025

Autore: D4m0n CVE-2025-50168 Questo è un exploit presentato a Pwn2Own Berlin 2025 - Categoria LPE. La vulnerabilità si verifica in Win32kbase!DirectComposition e ulteriori dettagli sono disponibili nel post del blog. Riconoscimenti Tecnica di bypass di kASLR: prefetch-tool di carrotc4k3...

CVE-2021-40449_poc

CVE-2021-40449 Plus d'infos ici : https://kristal-g.github.io/2021/11/05/CVE-2021-40449POC.html Compilation J'ai un peu bricolé avec la bibliothèque MinHook pour qu'elle supporte en partie le 2019 Platform Toolset. C'est pourquoi j'ai inclus les fichiers lib avec ce dépôt. Adaptation pour les...

Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

(Pwn2Own) Microsoft Windows win32kbase Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

(0Day) Microsoft Windows DirectComposition Out-Of-Bounds Read Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Microsoft Windows win32kbase!NtQueryCompositionInputQueueAndTransform Kernel Stack Memory Disclosure

The win32k!NtQueryCompositionInputQueueAndTransform system call may disclose portions of uninitialized kernel stack memory to user-mode clients on Windows 10. Windows Kernel stack memory disclosure in win32kbase!NtQueryCompositionInputQueueAndTransform We have discovered that the...