• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

luafv

  1. 1

    Exploits Microsoft Windows LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition

    On Microsoft Windows, the LUAFV driver has a race condition in the LuafvPostReadWrite callback if delay virtualization has occurred during a read leading to the SECTION_OBJECT_POINTERS value being reset to the underlying file resulting in elevation of privilege. View the full article
  2. 1

    Exploits Microsoft Windows LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation

    On Microsoft Windows, the LUAFV driver can confuse the cache and memory manager to replace the contents of privileged file leading to elevation of privilege. View the full article
  3. 1

    Exploits Microsoft Windows LUAFV NtSetCachedSigningLevel Device Guard Bypass

    On Microsoft Windows, the NtSetCachedSigningLevel system call can be tricked by the operation of LUAFV to apply a cached signature to an arbitrary file leading to a bypass of code signing enforcement under UMCI with Device Guard. View the full article
  4. 1

    Exploits Microsoft Windows LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation

    On Microsoft Windows, the LUAFV driver bypasses security checks to copy short names during file virtualization which can be tricked into writing an arbitrary short name leading to elevation of privilege. View the full article
  5. 1

    Exploits Microsoft Windows LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation

    On Microsoft Windows, the LUAFV driver doesn't take into account a virtualized handle being duplicated to a more privileged process resulting in elevation of privilege. View the full article
  6. 1

    Exploits Microsoft Windows LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation

    On Microsoft Windows, the LUAFV driver reuses the file's create request DesiredAccess parameter, which can include MAXIMUM_ACCESS, when virtualizing a file resulting in elevation of privilege. View the full article
Back
Top