CVE-2020-1066
HIGH EXPLOITED RANSOMWARE.NET Framework - Privilege Escalation
Title source: llmExploitation Summary
CVE-2020-1066 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns. EIP tracks 4 public exploits from researchers including cbwang505, xyddnljydd, Ascotbe.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-1066, a Windows privilege escalation vulnerability. The code includes utilities for manipulating Windows objects and directories, likely to exploit a flaw in the Windows kernel or file system handling.
Description
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects., aka '.NET Framework Elevation of Privilege Vulnerability'.
Exploits (4)
This repository contains a proof-of-concept exploit for CVE-2020-1066, a Windows privilege escalation vulnerability. The code includes utilities for manipulating Windows objects and directories, likely to exploit a flaw in the Windows kernel or file system handling.
This repository contains auto-generated RPC client stubs for CVE-2020-1066, likely part of a larger exploit framework. The code is boilerplate MIDL-generated RPC bindings without exploitative logic.
This repository is a collection of documentation and metadata for various Windows CVEs, including CVE-2003-0352, CVE-2006-3439, CVE-2008-1084, and others. It contains README files with descriptions and a Python script for generating documentation, but no functional exploit code for CVE-2020-1066.
This repository contains a functional exploit for CVE-2020-1066, a Windows privilege escalation vulnerability. The code includes utilities for manipulating file system objects and COM objects to exploit the vulnerability.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H