PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System

theori.io | vulnerability | #privilege-escalation | #lpe | #windows-driver | #exploit-chain | #n-day
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part three of the N-day exploit chain series, covering a Windows driver privilege-escalation flaw used to move from medium-integrity access to SYSTEM in a full exploit chain.
Published
Collected

Related coverage

vulnerability · blog.quarkslab.com
MyReport Updater: From gRPC to SYSTEM
MyReport is a report generation software often used as a component of web-based applications. We describe a privilege escalation and remote code execution vulnerabilities in MyReport Updater 2.1.1 through its update configuration and gRPC service.
High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · mccaulay.co.uk
go2shell: Rooting Home Assistant through SSDP
# go2shell: Rooting Home Assistant through SSDP 7 October 20267 October 2026 McCaulayVulnerability Research ## Introduction Home Assistant is one of the most widely deployed open-source home...
tool · github.com
Linux LPE Toolkit: Multi-Architecture Automated Privilege Escalation Tool
Provides penetration testers and red teams with an all-in-one, multi-architecture automated post-exploitation toolkit that simplifies Linux kernel privilege escalation without requiring on-target compilers.
vulnerability · theori.io
Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM
Final part of the N-day chain series: how CVE-2023-36802, a type-confusion flaw in the mskssrv.sys driver, was analysed and exploited to raise VMware privileges to SYSTEM on the host.
Back