tags:windowslpeITWuaf original link: Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM newsletter link: exploits.club Weekly Newsletter 22


Exploits Club Summary:

Long time exploit club readers will know we have been keeping close tabs on this series from Theori. The team has been writing up each step of their 1-Day full-chain, and we have finally reached the finale. In their most recent blog post, the team describes exploiting CVE-2023-36802 (the same bug @chompie1337 wrote-up as well). The entry follows the same format as the others in the series, first describing necessary background for the readers, before going into the vuln, patch, and exploit.