References https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2016/ms16-034 https://avd.aliyun.com/detail?id=AVD-2020-0724 https://www.cnblogs.com/sq-smile/p/13257877.html https://www.venustech.com.cn/new_type/aqtg/20230609/25743.html https://blog.csdn.net/further_eye/article/details/116030405 https://cve.imfht.com/poc_detail/c576f2d968467c83480e2f8537d98358702cd79d https://rivers.chaitin.cn/blog/cq951890lnechd244h9g https://cloud.tencent.com/developer/article/1807026 https://qkl.seebug.org/vuldb/ssvid-90177 https://nvd.nist.gov/vuln/detail/cve-2023-29336 https://safe.security/wp-content/uploads/windows-win32k-elevation-of-privilege-vulnerability.pdf https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-the-win32k-elevation-of-privilege-vulnerability-in-windows-server-2008-windows-embedded-posready-2009-and-windows-embedded-standard-2009-july-10-2018-f82533d1-628f-4dcf-b05d-2990991d11f5 https://www.anquanke.com/post/id/241804 https://www.secrss.com/articles/29758 https://www.sentinelone.com/vulnerability-database/cve-2021-1732/ https://unit42.paloaltonetworks.com/win32k-analysis-part-1/ https://github.com/Yuri08loveElaina/CVE-2025-49667 https://www.exploit-db.com/exploits/52301 https://nvd.nist.gov/vuln/detail/CVE-2023-29336 https://unit42.paloaltonetworks.com/win32k-analysis-part-2/
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposureWindows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞(CVE-2025-62522)Vite开发服务器Windows环境下文件泄露漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-26513)SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution