CVE-2018-8453

This Metasploit module exploits CVE-2018-8453, a Win32k privilege escalation vulnerability in Windows. It uploads and executes a precompiled exploit binary to elevate privileges from a local session.

This repository contains a working exploit for CVE-2018-8453, a Windows kernel vulnerability that allows local privilege escalation (LPE) via a use-after-free in win32k.sys. The exploit uses palette manipulation and pool feng shui techniques to achieve arbitrary read/write in kernel memory.

This repository contains a writeup and presentation materials from leHACK 2019 analyzing CVE-2018-8453, a Use-After-Free (UAF) and double-free vulnerability in the Windows kernel driver win32k.sys. It discusses exploitation techniques, binary diffing, and mitigation bypasses but does not include actual exploit code.

This repository contains a functional exploit for CVE-2018-8453, a Windows kernel privilege escalation vulnerability affecting Windows 8.1 and later. The exploit leverages a use-after-free in win32k.sys via Palette objects to achieve arbitrary kernel read/write and ultimately elevate privileges to SYSTEM.

This Metasploit module exploits CVE-2018-8453, a Win32k privilege escalation vulnerability in Windows. It leverages a memory corruption flaw in the NtUserSetWindowFNID function to escalate privileges from a local user to SYSTEM.