Exploitation Summary
CVE-2020-17087 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 5 public exploits from researchers including vp777, revengsh, raiden757.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2020-17087, a Windows kernel pool overflow vulnerability in the BCrypt library. The exploit leverages a non-paged pool overflow to achieve arbitrary read/write primitives and ultimately escalate privileges.
Description
Windows Kernel Local Elevation of Privilege Vulnerability
Exploits (5)
This is a working proof-of-concept exploit for CVE-2020-17087, a Windows kernel pool overflow vulnerability in the BCrypt library. The exploit leverages a non-paged pool overflow to achieve arbitrary read/write primitives and ultimately escalate privileges.
This PoC demonstrates a buffer overflow vulnerability in BCryptSetContextFunctionProperty due to improper size handling, leading to a heap overflow in NonPagedPoolNx. The exploit triggers the vulnerability by passing a crafted buffer size that results in an undersized allocation.
This is a proof-of-concept exploit for CVE-2020-17087, a Windows kernel vulnerability in the BCrypt component. The exploit leverages a heap overflow to achieve arbitrary read/write primitives, targeting the SegmentHeap to escalate privileges.
The repository contains a functional proof-of-concept exploit for CVE-2020-17087, a Windows kernel vulnerability in the CNG (Cryptography Next Generation) driver. The exploit demonstrates a heap-based buffer overflow via a maliciously crafted IOCTL request to the CNG device, leading to potential local privilege escalation.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H