PPLmedic

PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...

Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

A cyber mercenary that "ostensibly sells general security and information analysis services to commercial customers" used several Windows and Adobe zero-day exploits in limited and highly-targeted attacks against European and Central American entities. The company, which Microsoft describes as a...

CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability

...

Windows Update Medic Service Heap Buffer Overflow Privilege Escalation

The vulnerability of the Windows Update Medic Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with elevated privileges...

CVE-2021-36948: Undefined Security Weakness

Windows Update Medic Service Elevation of Privilege Vulnerability...

Microsoft Patch Tuesday, August 2021 Edition

Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software...

CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Update Medic Service Elevation of Privilege Vulnerability...

CVE-2020-17070 Windows Update Medic Service Elevation of Privilege Vulnerability

...

CVE-2020-17070: Undefined Security Weakness

Windows Update Medic Service Elevation of Privilege Vulnerability...

PT-2020-4607 · Microsoft · Windows Update Medic Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Medic Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Update Medic Service component of the Windows operating system. This can be exploited to allow a...