CVE-2019-0623
HIGH EXPLOITEDWindows - Elevation of Privilege in Win32k Component
Title source: llmExploitation Summary
CVE-2019-0623 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Anti-ghosts, Ascotbe.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2019-0623, a Windows local privilege escalation vulnerability. The code demonstrates memory manipulation techniques to achieve privilege escalation by exploiting session pool allocations and GDI object handling.
Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Exploits (2)
This repository contains a proof-of-concept exploit for CVE-2019-0623, a Windows local privilege escalation vulnerability. The code demonstrates memory manipulation techniques to achieve privilege escalation by exploiting session pool allocations and GDI object handling.
This repository contains documentation and configuration scripts for a collection of Windows exploits, including CVE-2003-0352, CVE-2006-3439, CVE-2008-1084, and others. It includes Python scripts for generating documentation and organizing exploit information, but no actual exploit code for CVE-2019-0623.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H