{"uuid": "ca191331-e3c2-4a86-af9e-70fc4864e295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-35250", "type": "published-proof-of-concept", "source": "https://t.me/ZeroDay_TM/889", "content": "\u2022 Exploit for Windows Kernel-mode Driver Elevation of Privilege Flaw (CVE-2024-35250)\n\nThe vulnerability lies within the handling of property requests in the ks.sys driver. Specifically, when the KSPROPERTY_TYPE_UNSERIALIZESET flag is provided, a series of operations can be initiated that ultimately lead to arbitrary IOCTL calls. During this process, the user-supplied buffer is copied into a newly allocated space and executed without proper validation.\n\nLink: https://github.com/varwara/CVE-2024-35250\n\n#Exploit #Kernel #Windows #vulnerability\n-   -   -   -   -   -   -   -   -\n\u2022 @Old_Unclee\n\u2022 @ZeroDay_TM", "creation_timestamp": "2024-10-16T17:16:32.000000Z"}