References https://avd.aliyun.com/detail?id=AVD-2025-49678 https://zone.ci/aliyun/ali_nvd/127914.html https://zhuanlan.zhihu.com/p/1949428164284649847 https://zone.ci/aliyun/ali_nvd/81877.html https://www.huorong.cn/document/tech/leak_report/1851 https://support.microsoft.com/zh-cn/topic/windows-embedded-posready-2009-%E5%92%8C-windows-embedded-standard-2009-%E4%B8%AD%E7%9A%84%E7%89%B9%E6%9D%83%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%AE%89%E5%85%A8%E6%9B%B4%E6%96%B0%E8%AF%B4%E6%98%8E-2018-%E5%B9%B4-10-%E6%9C%88-9-%E6%97%A5-1e4fbb29-3cf1-e1bc-5427-351ecffb87a3 https://payloads.online/archivers/2020-03-21/1/ https://cloud.tencent.com/developer/article/1669432 https://www.sentinelone.com/vulnerability-database/cve-2026-25175/ https://zeropath.com/blog/windows-ntfs-cve-2025-32707-privilege-escalation https://nvd.nist.gov/vuln/detail/CVE-2018-8411 https://www.exploit-db.com/exploits/41240 https://sec-consult.com/blog/detail/pentesters-windows-ntfs-tricks-collection/ https://zeropath.com/blog/windows-ntfs-cve-2025-49678-null-pointer-dereference
Related VulnerabilitiesMicrosoft WDAC OLE DB Provider for SQL Server 远程执行代码漏洞Microsoft ODBC 驱动程序远程执行代码漏洞Windows 启用电话服务器特权提升漏洞Windows 图形组件特权提升漏洞Microsoft AllJoyn API 拒绝服务漏洞Windows Installer 特权提升漏洞(CVE-2024-21441) Microsoft WDAC OLE DB provider 访问控制漏洞Windows USB 集线器驱动程序远程代码执行漏洞