Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NT OS Kernel Information Disclosure Vulnerability – CVE-2025-53136

crowdfense.com | vulnerability | Medium | CVE-2025-53136 | #information-disclosure | #race-condition | #kaslr | #cve-2025-53136 | #windows-kernel | #patch-analysis

Summary

Analysis of CVE-2025-53136, a Windows kernel address leak introduced by the CVE-2024-43511 patch: a race condition in RtlSidHashInitialize leaks kernel pointers usable to defeat KASLR.
CVSS
5.5
Published
Collected

original ↗

Related coverage

  1. Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver – CVE-2025-53149 (crowdfense.com)
  2. Dojo challenge #47 APICrash solution (yeswehack.com)
  3. Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338 (crowdfense.com)
  4. Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394) (theori.io)
  5. Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM (theori.io)
  6. Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape) (theori.io)

back