CVE-2020-1034 PoC — Windows Kernel Elevation of Privilege Vulnerability

Source

https://github.com/yardenshafir/CVE-2020-1034

Associated Vulnerability

Title:Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-1034)
Description:An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.

Description

PoC demonstrating the use of cve-2020-1034 for privilege escalation

Readme

# CVE-2020-1034
PoC demonstrating the use of cve-2020-1034 for privilege escalation.
Tested on unpatched Windows 10 2004, build 19041.488.

Vulnerability was dicovered by Microsoft and fixed on patch Tuesday 8/9/2020:
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034

## Writeup
Part 1: https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less  
Part 1.5 - information leak: https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak/  
Part 2 - https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!