CVE-2023-28229 PoC — Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Source

https://github.com/Y3A/CVE-2023-28229

Associated Vulnerability

Title:Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (CVE-2023-28229)
Description:Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Readme

# CVE-2023-28229

Windows CNG KeyIso RPC EoP/SBX   
Discovered by: [@k0shl](https://twitter.com/KeyZ3r0)   
Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation

![](gg.png)

If compilation fails, rename `rpc.h` to something else because I didn't realise `rpc.h` is a standard include in Windows!

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →