PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-49689] Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

swarm.ptsecurity.com | vulnerability | CVE-2025-49689 | #privilege-escalation | #windows | #ntfs | #exploit-development | #cve-2025-49689 | #vhd
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A 20-year-old Windows NTFS flaw (CVE-2025-49689) reachable via a crafted VHD: the log file service bug causes cascading corruptions at mount time and can be exploited for privilege escalation.
CVE
CVE-2025-49689
Published
Collected

Related coverage

High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
blog · projectzero.google
Raising the Dead
A Windows Terminal Server issue allowing dead processes to be resurrected, reported to Microsoft and fixed in MS15-111, demonstrated as an exploitable elevation of privilege.
blog · projectzero.google
Windows Sandbox Attack Surface Analysis
Analyzing the attack surface of user-mode sandboxed applications helps find elevation of privilege bugs; automating the enumeration matters for initial analysis and detecting regressions.
blog · projectzero.google
Windows Drivers are True’ly Tricky
A bug in the TrueCrypt Windows driver, despite prior security audits, lets a normal user or low-integrity sandbox remap the main system drive and elevate privileges to SYSTEM or kernel.
Back