Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows CSRSS CSRFinalizeContext本地权限提升漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows的CSRSS服务实现上存在设计漏洞，本地攻击者可能利用此漏洞提升自己的权限。 从Windows Vista开始使用了一种扩展形式的本地过程调用(LPC)，被称为高级本地过程调用(ALPC)，用于取代旧的LPC与CSRSS进行通讯。每个新的进程都会创建到其会话CSRSS的ApiPort(\Windows\ApiPort或\Sessions\<sessionid>\Windows\ApiPort)的AL
CVSS Information
N/A
Vulnerability Type
N/A