SandboxEscaper

12 exploits Active since Sep 2018
CVE-2019-1069 GITLAB HIGH WORKING POC
Windows 10 and Windows Server - Elevation of Privilege via Task Scheduler File Operation Validation
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
CVSS 7.8
CVE-2018-8440 METASPLOIT HIGH ruby WORKING POC
Windows - Elevation of Privilege via ALPC
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS 7.8
EIP-2026-119540 EXPLOITDB text WORKING POC
Microsoft Windows (x86) - Task Scheduler' .job' Import Arbitrary Discretionary Access Control List Write / Local Privilege Escalation
EIP-2026-117514 EXPLOITDB text WRITEUP
Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Copy/Read
EIP-2026-117518 EXPLOITDB text WORKING POC
Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation
CVE-2019-0841 EXPLOITDB HIGH text WORKING POC
Windows AppX Deployment Service - Privilege Escalation
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
CVSS 7.8
EIP-2026-117479 EXPLOITDB WRITEUP
Microsoft Data Sharing - Local Privilege Escalation (PoC)
EIP-2026-117543 EXPLOITDB text SUSPICIOUS
Microsoft Windows - Windows Error Reporting Local Privilege Escalation
EIP-2026-117547 EXPLOITDB text WRITEUP
Microsoft Windows 10 (17763.379) - Install DLL
CVE-2019-0841 EXPLOITDB HIGH text WRITEUP
Windows AppX Deployment Service - Privilege Escalation
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
CVSS 7.8
EIP-2026-117499 EXPLOITDB text SUSPICIOUS
Microsoft Internet Explorer 11 - Sandbox Escape
CVE-2019-0863 EXPLOITDB HIGH text WORKING POC
Windows Error Reporting - Privilege Escalation
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
CVSS 7.8