Zombie-Kaiser/CVE-2024-30088-Windows-poc

PoC

该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

view exploit source poc_in_githubauthor Zombie-Kaiserpublished 2024-07-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	2024-06-11
Windows Kernel Elevation of Privilege Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.