Lucene search
K

9 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/04/29 12:0 a.m.52 views

Microsoft Windows win32kfull MulTransparentBlt Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys...

7.8CVSS6.1AI score0.02221EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/29 12:0 a.m.53 views

Microsoft Windows win32kfull MulStrokeAndFillPath Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys...

7.8CVSS6.1AI score0.02221EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/28 12:0 a.m.58 views

Microsoft Windows win32kfull MulStrokePath Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys...

7.8CVSS5.9AI score0.02221EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:0 a.m.47 views

Microsoft Windows win32kfull bStretch NULL Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys...

7.8CVSS5.7AI score0.02221EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/11 12:0 a.m.153 views

CVE-2021-27077

Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863, CVE-2021-26875, CVE-2021-26900. Recent assessments: gwillcox-r7 at March 11, 2021 6:25pm UTC reported: Interesting, so this was a bug within win32kfull.sys!BLTRECORD::bRotate originally disclosed by ZDI...

7.8CVSS0.5AI score0.06603EPSS
Exploits1References14
ATTACKERKB
ATTACKERKB
added 2021/02/25 12:0 a.m.440 views

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at February 10, 2021 10:03pm UTC reported: A very interesting vulnerability in win32kfull.sys on Windows 10 devices up to and including 20H2. Although the exploit in the wild specifically targeted Windows 10 v1709...

7.8CVSS8.2AI score0.88318EPSS
In wildExploits21References6
Zero Day Initiative
Zero Day Initiative
added 2017/07/11 12:0 a.m.42 views

(Pwn2Own) Microsoft Windows fnHKINLPRECT Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.s...

7.2CVSS8.1AI score0.00972EPSS
Exploits0References1
myhack58
myhack58
added 2017/06/13 12:0 a.m.45 views

Windows 10 the next MS16-098 RGNOBJ integer overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net

This article with reference to , the text talked about the Windows Kernel Pool Feng Shui, SetBitmapBits/GetBitmapBits to any address read and write, etc. the use of Means, and very helpful in learning the Windows kernel exploits. Test environment: Windows 10 1511 x64 Professional Edition2016.04 2...

0.2AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.47 views

(Pwn2Own) Microsoft Windows win32kfull.sys Surface Object Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how...

6.6CVSS3.2AI score0.01522EPSS
Exploits1References1
Rows per page
Query Builder