---
id: 4665
title: "[CVE-2023-36802] Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM"
cve: CVE-2023-36802
source_domain: theori.io
source_url: "https://theori.io/blog/chaining-n-days-to-compromise-all-part-6-windows-kernel-lpe-get-system"
published_at: "2024-05-21T15:00:00Z"
tags: ["privilege-escalation", "exploit-chain", "windows-kernel", "cve-2023-36802", "mskssrv"]
phying_url: "https://phying.com/item/4665"
lang: en
---

# [CVE-2023-36802] Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM

## Summary

Final part of the N-day chain series: how CVE-2023-36802, a type-confusion flaw in the mskssrv.sys driver, was analysed and exploited to raise VMware privileges to SYSTEM on the host.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2023-36802
- **Published:** 2024-05-21T15:00:00Z
- **Original:** https://theori.io/blog/chaining-n-days-to-compromise-all-part-6-windows-kernel-lpe-get-system
- **Phying News:** https://phying.com/item/4665