CVE-2023-36407

This PoC exploits CVE-2023-36407, a Hyper-V Elevation of Privilege vulnerability, by triggering an out-of-bounds write in the `winhvr.sys!WinHvSetVpState` function via a maliciously crafted `DeviceIoControl` call, leading to a BSOD due to non-paged pool corruption.

This PoC exploits CVE-2023-36407 by injecting a DLL into a target process to trigger an out-of-bounds write via DeviceIoControl. The exploit leverages a vulnerable driver to achieve local privilege escalation.