CVE-­2021­-1732 Microsoft Windows10 本地提权漏洞复现

CVE-­2021­-1732 Microsoft Windows10 本地提权漏洞复现

声明

本文仅供学习参考，请勿用作违法用途，否则后果自负

漏洞概要

漏洞名称： CVE-­2021­-1732 Microsoft Windows10 本地提权漏洞

漏洞类型： 本地权限提升

漏洞危害： 高

漏洞简介： Microsoft Microsof Windows Win32k是美国微软（Microsoft）公司的一个操作系统。提供一个多任务的图形用户界面。

受影响得版本及应用版本

Windows Server, version 20H2 (Server Core Installation)
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2019 (Server Core installation)
Windows Server 2019
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1803 for x64-based Systems

漏洞复现

VMware安装 windows 10 1909 x64

查看当前的版本
查看当前的用户
运行提权Exploit

漏洞EXP

https://github.com/KaLendsi/CVE-2021-1732-Exploit

目前只在windows 10 1909 x64上尝试。

参考链接

漏洞EXP

漏洞详情

---

欢迎关注我的公众号，第一时间获取安全咨询