Exploit/Advisories

Published on October 30th, 2020 📆 | 5757 Views ⚑

0

Microsoft Windows Kernel cng.sys Buffer Overflow

Powered by iSpeech
The Microsoft Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures. It constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape).
Source link

Tagged with: advisory • buffer • cngsys • CSRF • exploit • kernel • microsoft • overflow • scanner • security • vulnerability • whitepaper • windows • XSS