CVE-2021-40449 PoC — Win32k Elevation of Privilege Vulnerability

Source

https://github.com/BL0odz/CVE-2021-40449-NtGdiResetDC-UAF

Associated Vulnerability

Title: Win32k Elevation of Privilege Vulnerability (CVE-2021-40449)
Description:Win32k Elevation of Privilege Vulnerability

Readme

# CVE-2021-40449-NtGdiResetDC-UAF

A POC for CVE-2021-40449.
Only tested on 1809, the code is a bit rough, but it's a good experience for me.
Instead of using the `ThreadName` method, user-space memory allocation is used.

![result.PNG](https://github.com/BL0odz/CVE-2021-40449-NtGdiResetDC-UAF/blob/main/result.PNG?raw=true)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →