CVE-2021-33739
HIGH KEVMicrosoft DWM Core Library - Privilege Escalation
Title source: llmExploitation Summary
CVE-2021-33739 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 4 public exploits from researchers including freeide2017, giwon9977, Ascotbe.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-33739, targeting a Windows kernel vulnerability in the DirectComposition API. The exploit leverages memory corruption to achieve local privilege escalation (LPE) by manipulating kernel objects and executing shellcode.
Description
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Exploits (4)
This repository contains a functional exploit for CVE-2021-33739, targeting a Windows kernel vulnerability in the DirectComposition API. The exploit leverages memory corruption to achieve local privilege escalation (LPE) by manipulating kernel objects and executing shellcode.
This repository contains a functional exploit PoC for CVE-2021-33739, targeting a Windows kernel vulnerability in the DirectComposition API. The exploit leverages heap manipulation and kernel object address leakage to achieve local privilege escalation (LPE).
This repository contains a functional exploit PoC for CVE-2021-33739, targeting a Windows kernel vulnerability in the DirectComposition API. The exploit leverages heap manipulation and kernel object address leakage to achieve local privilege escalation (LPE).
This repository is a collection of documentation and metadata for various Windows CVEs, including CVE-2021-33739. It contains README files, issue templates, and a Python script for generating documentation but no functional exploit code.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H