PPLmedic

PPLmedic このツールは、署名者の種類が Windows である PPL に任意のコードを注入し、署名者の種類 WinTcb に昇格するための Userland エクスプロイトチェーンを実装しています。これらの手法は、もともと James Forshaw 別名 @tiraniddo 氏がブログ記事 COM を使用した Windows 保護プロセスへのコードインジェクション - パート 1 で議論したものです。 このツールの詳細については、関連するブログ記事をご覧ください: ユーザーランドで PPL を（再び）バイパスする 💣 免責事項 このツールは 高度な...

Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

A cyber mercenary that "ostensibly sells general security and information analysis services to commercial customers" used several Windows and Adobe zero-day exploits in limited and highly-targeted attacks against European and Central American entities. The company, which Microsoft describes as a...

CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability

...

The vulnerability of the Windows Update Medic Service component in Windows operating systems arises from operations that go beyond the buffer limits in memory, allowing attackers to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Update Medic Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with elevated privileges...

Microsoft Patch Tuesday, August 2021 Edition

Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software...

CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Update Medic Service Elevation of Privilege Vulnerability...

CVE-2020-17070 Windows Update Medic Service Elevation of Privilege Vulnerability

...

PT-2020-4607 · Microsoft · Windows Update Medic Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Medic Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Update Medic Service component of the Windows operating system. This can be exploited to allow a...