CVE-2023-29336
HIGH KEVWindows 10 1507 < 10.0.10240.19926 and 1607 < 10.0.14393.5921 - Use-After-Free in Win32k
Title source: llmExploitation Summary
CVE-2023-29336 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 9, 2023. EIP tracks 3 public exploits from researchers including Milad karimi, m-cetin, numencyber.
AI-analyzed exploit summary This exploit leverages a Win32k elevation of privilege vulnerability (CVE-2023-29336) by manipulating menu structures and memory corruption to achieve token stealing, ultimately escalating privileges to SYSTEM. The code includes shellcode execution and memory manipulation techniques.
Description
Win32k Elevation of Privilege Vulnerability
Exploits (3)
This exploit leverages a Win32k elevation of privilege vulnerability (CVE-2023-29336) by manipulating menu structures and memory corruption to achieve token stealing, ultimately escalating privileges to SYSTEM. The code includes shellcode execution and memory manipulation techniques.
This repository contains a functional proof-of-concept exploit for CVE-2023-29336, a Win32k local privilege escalation vulnerability. The exploit leverages memory corruption in the Win32k component to escalate privileges to SYSTEM by manipulating menu structures and kernel objects.
The repository contains functional exploit code for multiple CVEs, including CVE-2023-29336, which demonstrates a network-based attack using crafted IPv6 ESP fragments. The PoC for CVE-2022-36537 includes a malicious JDBC driver that executes arbitrary commands, indicating a working exploit for RCE.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H