Tag

Kernel Streaming Server

All articles tagged with #kernel streaming server

technology2 years ago•11 min saved

Zero-Day Exploitation: Microsoft Kernel Streaming Service Under Attack

A vulnerability (CVE-2023-36802) in the Microsoft Kernel Streaming Server, a Windows kernel component used for virtualization and sharing of camera devices, allows a local attacker to escalate privileges to SYSTEM. The vulnerability was discovered during an exploration of the Windows kernel's attack surface, leading to the identification of an object type confusion vulnerability. By exploiting this vulnerability, an attacker can achieve arbitrary kernel read-write and privilege escalation. The discovery highlights the importance of monitoring new code additions for potential vulnerabilities and the need for further research into object type confusion bugs in drivers that handle inter-process communication.

via Security Intelligence|

#exploit #kernel-streaming-server #microsoft

technology2 years ago•12 min saved

Zero-Day Exploitation: Microsoft Kernel Streaming Service Under Attack

A vulnerability (CVE-2023-36802) in the Microsoft Kernel Streaming Server, a Windows kernel component used for virtualization and sharing of camera devices, allows a local attacker to escalate privileges to SYSTEM. The vulnerability was discovered during an exploration of the Windows kernel attack surface, and a proof-of-concept exploit was developed. The exploit leverages an object type confusion vulnerability and a constant write-where primitive to achieve arbitrary kernel read-write and privilege escalation. The vulnerability was patched by Microsoft, and in-the-wild exploitation has been observed.

via Security Intelligence|

#exploit #kernel-streaming-server #microsoft