Researcher named SandboxEscaper Disclosed a zero-day vulnerability, without notifying Microsoft which is very rare now days. Its not clear what trigger this action from researcher as now a days MS is very friendly with researcher . This Disclosure leaving all Windows users vulnerable to the hackers until a security patch is release by the tech giant to address the issue..
The vulnerability is a privilege escalation issue which resides in the Windows' task scheduler program and occurred due to errors in the handling of Advanced Local Procedure Call (ALPC) systems.
Advanced local procedure call (ALPC) is an internal mechanism, available only to Windows operating system components, that facilitates high-speed and secure data transfer between one or more processes in the user mode.
Since Advanced Local Procedure Call (ALPC) interface is a local system, the impact of the vulnerability is limited with a CVSS score of 6.4 to 6.8, but the PoC exploit released by the researcher could potentially help malware authors to target Windows users.
Here is POC demo
The vulnerability is a privilege escalation issue which resides in the Windows' task scheduler program and occurred due to errors in the handling of Advanced Local Procedure Call (ALPC) systems.
Advanced local procedure call (ALPC) is an internal mechanism, available only to Windows operating system components, that facilitates high-speed and secure data transfer between one or more processes in the user mode.
Since Advanced Local Procedure Call (ALPC) interface is a local system, the impact of the vulnerability is limited with a CVSS score of 6.4 to 6.8, but the PoC exploit released by the researcher could potentially help malware authors to target Windows users.
Here is POC demo

No comments:
Post a Comment