4912 matches found
Windows-2
Windows-2 BlueKeep Vulnerable Lab - CVE-2019-0708 1. Overview This repository contains a deliberately vulnerable Windows lab designed to demonstrate the BlueKeep vulnerability affecting the Remote Desktop Protocol RDP service. BlueKeep is a critical pre-authentication Remote Code Execution RCE...
leHACK-Analysis-of-CVE-2018-8453
leHACK 2019: Analyzing CVE-2018-8453: An interesting tale of UAF and Double Free in Windows Kernel This talk was delivered at leHACK 2019 Abstract In this talk, we discuss intricate details of exploitation of CVE-2018-8453, a vulnerability in win32.sys Microsoft Windows driver. It which was...
CVE-2026-40369
This is a rewrite and summary of VoidSec’s public technical analysis of CVE-2026-40369, with an added flowchart and defensive notes for my own understanding. All core technical details come from his research. I did not perform independent reverse engineering on this bug. CVE-2026-40369: Defensive...
HITCON-2023-Demo-CVE-2023-20562
HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...
CVE-2024-30090
CVE-2024-30090 - LPE PoC CVE-2024-30090 found by Angelboy with DEVCORE. Parent.cpp Get the ntoskrnl base by using NtQuerySystemInformation medium-integrity - Compile as x64. Child.cpp The exploit for CVE-2024-30090 - Compile as x86. Thanks Big thanks Angelboy for your help and guidance!. Cedric...
ICALL-GADGET
ICALL GADGET ABUSE FOR COMMUNICATION General info: this is in the windows kernel and it will allow us to communicate in our driver without being detected to by anticheats So I was scrolling around in IDA and found this image After further inspection we can see that it calls a function called...
Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation
Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...
The vulnerability of the Windows Kernel component in operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Kernel component in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-85360
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-83942
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69723
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network...
CVE-2026-69669
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network...
CVE-2026-69578
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69473
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69466
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69421
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69406
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...