References https://avd.aliyun.com/detail?id=AVD-2024-43528 https://cve.imfht.com/detail/CVE-2024-21302 https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2016/ms16-150 https://zone.ci/aliyun/ali_nvd/389675.html https://www.anquanke.com/post/id/298973 https://xxb.fudan.edu.cn/43/c3/c33375a410563/page.htm https://blog.csdn.net/qq_40012781/article/details/125576708 https://research.qianxin.com/archives/1355 https://cloud.tencent.com/developer/article/2437178 https://research.qianxin.com/archives/2866 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43528
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposureWindows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞(CVE-2025-62522)Vite开发服务器Windows环境下文件泄露漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-26513)SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution