CVE-2019-1132
HIGH KEVWindows 7 and Windows Server 2008 - Elevation of Privilege in Win32k Component
Title source: llmExploitation Summary
CVE-2019-1132 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 15, 2022. EIP tracks 4 public exploits from researchers including ShivamTrivedi, Vlad-tri, petercc.
AI-analyzed exploit summary This exploit targets CVE-2021-1732, a Windows Win32k privilege escalation vulnerability. It manipulates menu objects and window handles to achieve arbitrary memory writes, ultimately executing shellcode to steal a SYSTEM token.
Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Exploits (4)
This exploit targets CVE-2021-1732, a Windows Win32k privilege escalation vulnerability. It manipulates menu objects and window handles to achieve arbitrary memory writes, ultimately executing shellcode to steal a SYSTEM token.
This repository contains a functional exploit for CVE-2019-1132, a Windows kernel privilege escalation vulnerability. The exploit leverages menu handling in win32k to achieve arbitrary code execution in kernel mode, ultimately stealing a SYSTEM token for local privilege escalation.
This is a functional exploit for CVE-2019-1132, a Windows win32k privilege escalation vulnerability. The code manipulates window and menu objects to achieve arbitrary memory writes, leading to token theft for SYSTEM privileges.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H