CVE-2019-1458

This repository provides a detailed technical analysis and proof-of-concept development process for CVE-2019-1458, a Windows win32k.sys vulnerability. It includes patch diffing, root cause analysis, and step-by-step exploitation insights.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2019-1458, targeting Windows kernel vulnerabilities via NtUserMessageCall and NtUserDefSetText syscalls. The exploit manipulates window class structures to achieve arbitrary read/write in kernel memory, ultimately escalating privileges.

This Metasploit module exploits CVE-2019-1458, a local privilege escalation vulnerability in Windows win32k.sys due to an uninitialized variable, allowing controlled writes to kernel memory. It targets Windows 7 x64 SP1 and other vulnerable versions, executing a reflective DLL payload to elevate privileges to SYSTEM.

This exploit leverages a window message handling vulnerability in Windows to achieve local privilege escalation by manipulating window class registration and triggering a dereference of controlled memory via NtUserMessageCall.