CVE-2025-48799

This repository contains a functional exploit for CVE-2025-48799, an elevation of privilege vulnerability in the Windows Update service. The exploit leverages arbitrary folder deletion via symbolic link manipulation when Storage Sense is configured to use a secondary drive, leading to local privilege escalation.

This repository contains a functional proof-of-concept exploit for CVE-2025-48799, targeting an integer overflow vulnerability in Apache Tomcat 9.0.48's HTTP header parser. The exploit crafts a malformed 'X-Forwarded' header to trigger memory corruption and execute shellcode.

This repository contains a functional proof-of-concept exploit for CVE-2025-48799, an elevation of privilege vulnerability in the Windows Update service. The exploit leverages arbitrary folder deletion via symbolic link manipulation when Storage Sense is configured to use a secondary drive.