PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338

crowdfense.com | vulnerability | CVE-2024-21338 | #lpe | #poc | #windows-kernel | #cve-2024-21338 | #applocker | #appid-sys | #smep | #kcfg
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In-depth analysis of CVE-2024-21338, an untrusted pointer dereference in Windows' appid.sys (AppLocker) driver enabling kernel privilege escalation, covering root cause, SMEP/kCFG bypasses and POCs.
CVE
CVE-2024-21338
Published
Collected

Related coverage

vulnerability · yokai.hakaisecurity.io
Windows Admin-to-Kernel Elevation of Privilege (CVE-2024-21338)
On February 13th, 2024, Microsoft disclosed the CVE-2024-21338 based on the security report which allows for read/write in the kernel memory.
High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
Medium · vulnerability · crowdfense.com
NT OS Kernel Information Disclosure Vulnerability – CVE-2025-53136
Analysis of CVE-2025-53136, a Windows kernel address leak introduced by the CVE-2024-43511 patch: a race condition in RtlSidHashInitialize leaks kernel pointers usable to defeat KASLR.
High · vulnerability · crowdfense.com
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver – CVE-2025-53149
Technical deep-dive into CVE-2025-53149, a heap-based buffer overflow in the Windows Kernel Streaming WOW Thunk Service driver (ksthunk.sys).
vulnerability · theori.io
Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM
Final part of the N-day chain series: how CVE-2023-36802, a type-confusion flaw in the mskssrv.sys driver, was analysed and exploited to raise VMware privileges to SYSTEM on the host.
Back