CVE-2015-2366

This exploit demonstrates a use-after-free vulnerability in Windows' DeferWindowPos function when manipulated from multiple threads, leading to potential privilege escalation or denial of service. The PoC triggers a race condition by calling EndDeferWindowPos from a separate thread while DeferWindowPos is executing.

This repository contains a functional proof-of-concept exploit for CVE-2015-2366, a use-after-free vulnerability in win32k.sys. The exploit triggers a BSOD (Bugcheck 0xD5) by manipulating window handles and deferred window positions, demonstrating the vulnerability in the Windows kernel.