CVE-2022-29072

This repository contains a detailed writeup in Turkish about CVE-2022-29072, a privilege escalation vulnerability in 7-Zip. The author describes the discovery process, exploitation technique involving a heap overflow and misuse of the HTML Help API, and a method to achieve SYSTEM privileges via psexec.

This repository provides a writeup and mitigation script for CVE-2022-29072, a potential privilege escalation vulnerability in 7-Zip through 21.07 on Windows. It includes a PowerShell script to remove the 7-zip.chm help file as a mitigation measure and Sentinel alerting rules for detection.

This repository contains a PowerShell script designed to detect and optionally mitigate vulnerable CHM files associated with CVE-2022-29072 in 7-Zip. The script checks file hashes against a list of known vulnerable hashes and can delete them if configured.

This repository provides a PowerShell script to mitigate CVE-2022-29072 by removing the vulnerable 7-zip.chm file. The vulnerability allows privilege escalation and command execution via interaction with hh.exe on Windows.