Microsoft Windows Canonical Display Driver Local Privilege Escalation (CVE-2021-34516)

Vulnerability Key Information Vulnerability IDs: - ZDI-21-1004 - ZDI-CAN-12784 - CVE-2021-34516 CVSS Score: 8.8 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Affected Vendor: Microsoft Affected Product: Windows Vulnerability Details: - This vulnerability exists in the DrvLineTo function within Microsoft Windows' Canonical Display Driver, allowing local attackers to escalate privileges on affected installations. - Attackers must first gain the ability to execute low-privilege code on the target system. - The specific issue lies in the cdd.dll driver, where user-supplied values are dereferenced as pointers without proper validation prior to use. Additional Details: - Microsoft has released an update to fix this vulnerability. More information is available in the Microsoft Security Update Guide. Disclosure Timeline: - 2021-05-13: Vulnerability reported to vendor - 2021-08-26: Coordinated public disclosure announcement Discoverer: Marcin Wiazowski

Goal Reached Thanks to every supporter — we hit 100%!

Microsoft Windows Canonical Display Driver Local Privilege Escalation (CVE-2021-34516)