← back | CVE Intelligence

CVE-2023-36802

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-36802.

Coverage Span: 2024-05-21 → 2026-06-24
Reports: 2 related reports

Associated Reports & Timeline

Old Bug, Harder Rules : Exploiting CVE-2023-36802 Without the Usual Shortcuts

Exploiting CVE-2023-36802, a type confusion in Microsoft's mskssrv.sys driver, without the usual shortcuts: no NtQuery* leaks or PreviousMode read/write, only what works under current mitigations.

Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM

Final part of the N-day chain series: how CVE-2023-36802, a type-confusion flaw in the mskssrv.sys driver, was analysed and exploited to raise VMware privileges to SYSTEM on the host.