what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2022-07-15

Windows Kernel nt!MiRelocateImage Invalid Read

Posted Jul 15, 2022

Authored by Google Security Research, mjurczyk

The Microsoft Windows kernel suffers from an invalid read in nt!MiRelocateImage while parsing a malformed PE file.

tags | exploit, kernel

systems | windows

advisories | CVE-2022-30155

SHA-256 | 14cc97653808a5e83777838181351383480596c1a9ab0edd737615c558008d89

Download | Favorite | View

Windows LSA Service LsapGetClientInfo Impersonation Level Check Privilege Escalation

Posted Jul 15, 2022

Authored by James Forshaw, Google Security Research

On Microsoft Windows, the LsapGetClientInfo API in LSASRV will fallback and directly capture a caller's impersonation token if it fails to impersonate, leading to elevation of privilege if the impersonation level is not checked.

tags | exploit

systems | windows

advisories | CVE-2022-30166

SHA-256 | 4f77530c88d7c141599b603fabccbde4f773bc1697a54702749961ba91a1346a

Download | Favorite | View