PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-21541] Windows Task Scheduler Application, Version 19044.1706 Advisory

bishopfox.com | vulnerability | CVE-2023-21541 | #microsoft | #privilege-escalation | #windows | #security-advisory | #cve-2023-21541 | #unquoted-search-path
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Advisory on CVE-2023-21541: Windows Task Scheduler mis-quotes executable paths with environment variables, letting local attackers escalate privileges via a planted C:\Program.exe; patched in 2023.
CVE
CVE-2023-21541
Published
Collected

Related coverage

High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
blog · bishopfox.com
Microsoft Intune, Version 1.55.48.0 Advisory
Advisory on Microsoft Intune 1.55.48.0: its Management Extension calls agentexecutor.exe unquoted, letting local users with write access run code as others; no fix is available.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
blog · projectzero.google
Raising the Dead
A Windows Terminal Server issue allowing dead processes to be resurrected, reported to Microsoft and fixed in MS15-111, demonstrated as an exploitable elevation of privilege.
blog · projectzero.google
Windows Sandbox Attack Surface Analysis
Analyzing the attack surface of user-mode sandboxed applications helps find elevation of privilege bugs; automating the enumeration matters for initial analysis and detecting regressions.
Back