In-the-Wild Series: Windows Exploits

projectzero.google | blog | #exploit | #vulnerability | #security-research

Summary

/* latin */ @font-face { font-family: 'Consolas'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/l/font?kit=X7nm4bA-A_-9jbjWaza9xMk&skey=3d1eb1871fcc58a1&v=v20) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } @import url('https://themes.googleusercontent.com/fonts/css?kit=lhDjYqiy3mZ0x6ROQEUoUw'); .post-body{.lst-kix_7wd9rjsbnhpd-5>li:before{content:"\0025a0 "}.lst-kix_ujffjs3qawk9-3>li:before{content:"\0025cf "}.lst-kix_7wd9rjsbnhpd-4>li:before{content:"\0025cb "}.lst-kix_7wd9rjsbnhpd-6>li:before{content:"\0025cf "}.lst-kix_ujffjs3qawk9-2>li:before{content:"\0025a0 "}.lst-kix_ujffjs3qawk9-4>li:before{content:"\0025cb "}.lst-kix_7wd9rjsbnhpd-3>li:before{content:"\0025cf "}.lst-kix_7wd9rjsbnhpd-7>li:before{content:"\0025cb "}.lst-kix_7wd9rjsbnhpd-1>li:before{content:"\0025cb "}ol.lst-kix_oorscaxfsjcy-2.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-2 0}.lst-kix_oorscaxfsjcy-4>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-4}.lst-kix_ujffjs3qawk9-7>li:before{content:"\0025cb "}.lst-kix_7wd9rjsbnhpd-0>li:before{content:"\0025cf "}.lst-kix_7wd9rjsbnhpd-2>li:before{content:"\0025a0 "}.lst-kix_7wd9rjsbnhpd-8>li:before{content:"\0025a0 "}.lst-kix_ujffjs3qawk9-6>li:before{content:"\0025cf "}.lst-kix_ujffjs3qawk9-5>li:before{content:"\0025a0 "}.lst-kix_oorscaxfsjcy-7>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-7,lower-latin) ". "}.lst-kix_oorscaxfsjcy-8>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-8,lower-roman) ". "}.lst-kix_oorscaxfsjcy-5>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-5}ul.lst-kix_ujffjs3qawk9-0{list-style-type:none}ol.lst-kix_oorscaxfsjcy-6.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-6 0}.lst-kix_ujffjs3qawk9-0>li:before{content:"\0025cf "}.lst-kix_ujffjs3qawk9-1>li:before{content:"\0025cb "}.lst-kix_4skujdbstxjc-0>li:before{content:"\0025cf "}.lst-kix_oorscaxfsjcy-0>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-0,decimal) ". "}ol.lst-kix_oorscaxfsjcy-3.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-3 0}.lst-kix_oorscaxfsjcy-1>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-1,lower-latin) ". "}.lst-kix_oorscaxfsjcy-6>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-6,decimal) ". "}ol.lst-kix_oorscaxfsjcy-0.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-0 0}.lst-kix_oorscaxfsjcy-5>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-5,lower-roman) ". "}.lst-kix_oorscaxfsjcy-3>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-3,decimal) ". "}.lst-kix_oorscaxfsjcy-4>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-4,lower-latin) ". "}.lst-kix_ujffjs3qawk9-8>li:before{content:"\0025a0 "}.lst-kix_oorscaxfsjcy-2>li:before{content:"" counter(lst-ctn-kix_oorscaxfsjcy-2,lower-roman) ". "}ol.lst-kix_oorscaxfsjcy-0{list-style-type:none}ol.lst-kix_oorscaxfsjcy-1{list-style-type:none}ol.lst-kix_oorscaxfsjcy-2{list-style-type:none}ol.lst-kix_oorscaxfsjcy-4.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-4 0}ul.lst-kix_7wd9rjsbnhpd-7{list-style-type:none}ol.lst-kix_oorscaxfsjcy-3{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-8{list-style-type:none}ol.lst-kix_oorscaxfsjcy-4{list-style-type:none}ol.lst-kix_oorscaxfsjcy-5{list-style-type:none}ol.lst-kix_oorscaxfsjcy-6{list-style-type:none}ol.lst-kix_oorscaxfsjcy-7{list-style-type:none}.lst-kix_oorscaxfsjcy-7>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-7}.lst-kix_oorscaxfsjcy-1>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-1}ol.lst-kix_oorscaxfsjcy-8{list-style-type:none}ol.lst-kix_oorscaxfsjcy-7.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-7 0}.lst-kix_oorscaxfsjcy-8>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-8}ol.lst-kix_oorscaxfsjcy-1.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-1 0}.lst-kix_oorscaxfsjcy-2>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-2}ul.lst-kix_7wd9rjsbnhpd-5{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-6{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-3{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-4{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-1{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-2{list-style-type:none}ul.lst-kix_7wd9rjsbnhpd-0{list-style-type:none}ul.lst-kix_4skujdbstxjc-1{list-style-type:none}ul.lst-kix_4skujdbstxjc-0{list-style-type:none}ul.lst-kix_4skujdbstxjc-3{list-style-type:none}.lst-kix_oorscaxfsjcy-3>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-3}.lst-kix_4skujdbstxjc-1>li:before{content:"\0025cb "}ul.lst-kix_4skujdbstxjc-2{list-style-type:none}.lst-kix_4skujdbstxjc-3>li:before{content:"\0025cf "}ul.lst-kix_4skujdbstxjc-5{list-style-type:none}.lst-kix_oorscaxfsjcy-6>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-6}ul.lst-kix_4skujdbstxjc-4{list-style-type:none}ul.lst-kix_4skujdbstxjc-7{list-style-type:none}.lst-kix_4skujdbstxjc-2>li:before{content:"\0025a0 "}ul.lst-kix_4skujdbstxjc-6{list-style-type:none}ol.lst-kix_oorscaxfsjcy-8.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-8 0}ul.lst-kix_ujffjs3qawk9-5{list-style-type:none}ul.lst-kix_4skujdbstxjc-8{list-style-type:none}ul.lst-kix_ujffjs3qawk9-6{list-style-type:none}ul.lst-kix_ujffjs3qawk9-7{list-style-type:none}.lst-kix_4skujdbstxjc-5>li:before{content:"\0025a0 "}ul.lst-kix_ujffjs3qawk9-8{list-style-type:none}ul.lst-kix_ujffjs3qawk9-1{list-style-type:none}ul.lst-kix_ujffjs3qawk9-2{list-style-type:none}li.li-bullet-0:before{margin-left:-18pt;white-space:nowrap;display:inline-block;min-width:18pt}ul.lst-kix_ujffjs3qawk9-3{list-style-type:none}.lst-kix_4skujdbstxjc-4>li:before{content:"\0025cb "}ul.lst-kix_ujffjs3qawk9-4{list-style-type:none}.lst-kix_4skujdbstxjc-6>li:before{content:"\0025cf "}ol.lst-kix_oorscaxfsjcy-5.start{counter-reset:lst-ctn-kix_oorscaxfsjcy-5 0}.lst-kix_4skujdbstxjc-7>li:before{content:"\0025cb "}.lst-kix_4skujdbstxjc-8>li:before{content:"\0025a0 "}.lst-kix_oorscaxfsjcy-0>li{counter-increment:lst-ctn-kix_oorscaxfsjcy-0}ol{margin:0;padding:0}table td,table th{padding:0}.c24{border-right-style:solid;padding-top:4pt;border-top-width:1pt;border-bottom-color:#000000;border-right-width:1pt;padding-left:4pt;border-left-color:#000000;padding-bottom:4pt;line-height:1.5;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;border-top-color:#000000;border-bottom-style:solid;orphans:2;widows:2;text-align:left;padding-right:4pt}.c42{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#f4cccc;border-left-style:solid;border-bottom-width:1pt;width:79.5pt;border-top-color:#000000;border-bottom-style:solid}.c48{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#d9ead3;border-left-style:solid;border-bottom-width:1pt;width:114pt;border-top-color:#000000;border-bottom-style:solid}.c34{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#d9d9d9;border-left-style:solid;border-bottom-width:1pt;width:114pt;border-top-color:#000000;border-bottom-style:solid}.c10{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#d9ead3;border-left-style:solid;border-bottom-width:1pt;width:79.5pt;border-top-color:#000000;border-bottom-style:solid}.c47{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#f4cccc;border-left-style:solid;border-bottom-width:1pt;width:114pt;border-top-color:#000000;border-bottom-style:solid}.c49{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#d9d9d9;border-left-style:solid;border-bottom-width:1pt;width:193.5pt;border-top-color:#000000;border-bottom-style:solid}.c25{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#e0e0e0;border-top-width:1pt;border-right-width:1pt;border-left-color:#e0e0e0;vertical-align:top;border-right-color:#e0e0e0;border-left-width:1pt;border-top-style:solid;background-color:#fafafa;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#e0e0e0;border-bottom-style:solid}.c0{padding-top:18pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c32{padding-top:16pt;padding-bottom:4pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c30{padding-top:0pt;padding-bottom:0pt;line-height:1.25;orphans:2;widows:2;text-align:left}.c6{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c2{font-size:10pt;font-family:"Consolas";color:#000000;font-weight:400}.c26{text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline}.c4{font-size:10pt;font-family:"Consolas";color:#616161;font-weight:400}.c18{padding-top:0pt;padding-bottom:0pt;line-height:1.0;text-align:left}.c16{color:#434343;font-weight:400;font-size:14pt;font-family:"Arial"}.c8{padding-top:0pt;padding-bottom:0pt;line-height:1.5;text-align:left}.c3{font-size:10pt;font-family:"Consolas";color:#3367d6;font-weight:400}.c1{font-size:10pt;font-family:"Consolas";color:#00796b;font-weight:400}.c17{border-spacing:0;border-collapse:collapse;margin-right:auto}.c13{color:#000000;font-weight:400;font-size:11pt;font-family:"Arial"}.c21{font-family:"Consolas";color:#9c27b0;font-weight:400}.c22{font-family:"Consolas";color:#0f9d58;font-weight:400}.c7{text-decoration:none;vertical-align:baseline;font-style:normal}.c50{font-family:"Consolas";color:#0d904f;font-weight:400}.c14{font-family:"Consolas";color:#455a64;font-weight:400}.c20{font-family:"Consolas";color:#c53929;font-weight:400}.c5{font-weight:400;font-family:"Courier New"}.c40{text-decoration:none;vertical-align:baseline}.c27{margin-left:36pt;padding-left:0pt}.c46{padding:0;margin:0}.c45{max-width:468pt;padding:72pt 72pt 72pt 72pt}.c43{font-weight:400;font-family:"Arial"}.c41{color:inherit;text-decoration:inherit}.c9{background-color:#ffe599}.c36{margin-left:36pt}.c28{font-style:italic}.c23{height:0pt}.c15{color:#000000}.c29{background-color:#ffffff}.c33{font-size:11pt}.c38{height:294.8pt}.c11{height:11pt}.c51{font-family:"Arial"}.c12{font-size:10pt}.c37{font-weight:700}.c35{color:#545454}.c39{height:216pt}.c31{height:24pt}.c19{background-color:#ea9999}.c44{font-size:16pt}.title{padding-top:0pt;color:#000000;font-size:26pt;padding-bottom:3pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}.subtitle{padding-top:0pt;color:#666666;font-size:15pt;padding-bottom:16pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}li{color:#000000;font-size:11pt;font-family:"Arial"}p{margin:0;color:#000000;font-size:11pt;font-family:"Arial"}h1{padding-top:20pt;color:#000000;font-size:20pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}h2{padding-top:18pt;color:#000000;font-size:16pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}h3{padding-top:16pt;color:#434343;font-size:14pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}h4{padding-top:14pt;color:#666666;font-size:12pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}h5{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:justify}h6{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:justify}}This is part 6 of a 6-part series detailing a set of vulnerabilities found by Project Zero being exploited in the wild. To read the other parts of the series, see the introduction post.

Published: 2021-01-12 00:00
Collected: 2026-09-22 23:23

original ↗

Related coverage

back