Privilege escalation using the XAML diagnostics API (CVE-2023-36003)# Privilege escalation using the XAML diagnostics API (CVE-2023-36003)
This is a POC (Proof of Concept) of a privilege escalation vulnerability using
the XAML diagnostics API. The vulnerability was patched in December's Patch
Tuesday, and the CVE assigned to it is
[CVE-2023-36003](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36003).
## Usage
The POC is a C++ project that can be compiled using Visual Studio. After
compiling, the POC can be run without arguments to look for an inaccessible
process and then run the exploit against it. Alternatively, a process id can be
passed as an argument, and the exploit will be run against that process.
## Vulnerability details
More details about the vulnerability can be found in the following blog post:
[Privilege escalation using the XAML diagnostics API
(CVE-2023-36003)](https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/)
[4.0K] /data/pocs/f30ee6faf3f84fa0244d49e0e4c3a3f886403221
├── [4.0K] pe-poc
│ ├── [7.1K] pe-poc.vcxproj
│ ├── [ 955] pe-poc.vcxproj.filters
│ └── [2.2K] poc.cpp
├── [4.0K] pe-poc-dll
│ ├── [ 96] exports.def
│ ├── [7.2K] pe-poc-dll.vcxproj
│ ├── [ 955] pe-poc-dll.vcxproj.filters
│ └── [3.5K] poc.cpp
├── [2.1K] pe-poc.sln
└── [ 931] README.md
2 directories, 9 files