CVE-2022-24481
HIGH EXPLOITED IN THE WILDWindows Common Log File System Driver - Privilege Escalation
Title source: llmExploitation Summary
CVE-2022-24481 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 3 public exploits from researchers including fr4nkxixi, uname1able.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2022-24481, targeting a Windows kernel vulnerability. The code demonstrates privilege escalation by manipulating system handles and kernel objects.
Description
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exploits (3)
This is a proof-of-concept exploit for CVE-2022-24481, targeting a Windows kernel vulnerability. The code demonstrates privilege escalation by manipulating system handles and kernel objects.
This repository contains functional exploit code for CVE-2022-24481, a local privilege escalation vulnerability in the Windows Common Log File System (CLFS) driver. The PoC manipulates CLFS log files to achieve arbitrary kernel memory writes, leading to token replacement and elevated privileges.
The repository contains a functional exploit PoC for CVE-2022-24481, targeting a Windows kernel vulnerability. The code includes detailed structures and functions to manipulate system handles and processes, indicating a local privilege escalation (LPE) exploit.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H