Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338

crowdfense.com | vulnerability | CVE-2024-21338 | #lpe | #poc | #windows-kernel | #cve-2024-21338 | #applocker | #appid-sys | #smep | #kcfg

Summary

In-depth analysis of CVE-2024-21338, an untrusted pointer dereference in Windows' appid.sys (AppLocker) driver enabling kernel privilege escalation, covering root cause, SMEP/kCFG bypasses and POCs.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation (github.com)
  2. CVE-2026-24294: Windows SMB local NTLM reflection privilege-escalation PoC (github.com)
  3. NT OS Kernel Information Disclosure Vulnerability – CVE-2025-53136 (crowdfense.com)
  4. Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver – CVE-2025-53149 (crowdfense.com)
  5. Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM (theori.io)
  6. Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System (theori.io)

back