Description
Windows Win32k存在权限提升漏洞。此漏洞是由于对接收的文件缺乏校验导致的。
Windows Win32k CVE-2024-20683 权限提升漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2024-20683
https://nvd.nist.gov/vuln/detail/cve-2024-20683
https://www.cve.org/CVERecord?id=CVE-2024-20683
https://github.com/advisories/GHSA-rrrh-8rp4-pgc2
https://zhuanlan.zhihu.com/p/677515230
https://www.cnvd.org.cn/webinfo/show/9636
https://edudigital123.com/article/4211/
https://nic.sxcast.edu.cn/info/142.html
https://blog.csdn.net/ZL_1618/article/details/137912598
https://cernet.edu.cn/xxh/cernet/ccert/202402/t20240221_2559039.shtml
http://www.rj-itop.com/ar/20240126000001.htm
https://www.venustech.com.cn/new_type/aqtg/20240110/26861.html
https://www.secrss.com/articles/62737
https://www.helpnetsecurity.com/2024/01/09/cve-2024-20674-cve-2024-20700/
https://www.rapid7.com/blog/post/2024/01/09/patch-tuesday-january-2024/
https://avd.aquasec.com/nvd/2024/cve-2024-20683/
https://www.tenable.com/cve/CVE-2024-20683
https://www.163.com/dy/article/IO5RSQNP05560QLI.html
https://www.fortra.com/blog/patch-tuesday-update-january-2024-1