CVE-2024-21345
HIGHWindows Server 2022 23H2 < 10.0.25398.709 - Heap-based Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-21345. PoCs published by exploits-forsale, FoxyProxys.
AI-analyzed exploit summary This PoC exploits a race condition in NtQueryInformationThread to manipulate TEB (Thread Environment Block) offsets, potentially leading to arbitrary kernel memory writes. The code uses a high-priority thread to flip TEB offset and read size values during the query, creating a race condition.
Description
Windows Kernel Elevation of Privilege Vulnerability
Exploits (2)
This PoC exploits a race condition in NtQueryInformationThread to manipulate TEB (Thread Environment Block) offsets, potentially leading to arbitrary kernel memory writes. The code uses a high-priority thread to flip TEB offset and read size values during the query, creating a race condition.
The repository contains a vague README with no technical details, no exploit code, and makes unrealistic claims about kernel exploitation. It lacks any substantive information about the vulnerability or proof-of-concept code.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H