TT 脆弱性 Blog

脆弱性情報に関する「個人」の調査・研究のログ

CVE-2024-35250 / MSKSSRV特権昇格 (まとめ)

【ニュース】

◆Windows kernel bug now exploited in attacks to gain SYSTEM privileges (BleepingComputer, 2024/12/16 14:50)
[Windowsカーネルのバグが、SYSTEM特権を獲得するための攻撃に悪用される]
https://www.bleepingcomputer.com/news/security/windows-kernel-bug-now-exploited-in-attacks-to-gain-system-privileges/
https://vul.hatenadiary.com/entry/2024/12/16/000000_1


【Exploit / PoC】

◆CVE-2024-35250 (varwara, 2024/12/03)
https://github.com/varwara/CVE-2024-35250


【検索】

■Google

google: CVE-2024-35250
google: MSKSSRV特権昇格
google: MSKSSRV

google:news: CVE-2024-35250
google:news: MSKSSRV特権昇格
google:news: MSKSSRV

google: site:virustotal.com CVE-2024-35250
google: site:virustotal.com MSKSSRV特権昇格
google: site:virustotal.com MSKSSRV

google: site:github.com CVE-2024-35250
google: site:github.com MSKSSRV特権昇格
google: site:github.com MSKSSRV


■Bing

https://www.bing.com/search?q=CVE-2024-35250
https://www.bing.com/search?q=MSKSSRV特権昇格
https://www.bing.com/search?q=MSKSSRV

https://www.bing.com/news/search?q=CVE-2024-35250
https://www.bing.com/news/search?q=MSKSSRV特権昇格
https://www.bing.com/news/search?q=MSKSSRV


■Twitter

https://twitter.com/search?q=%23CVE-2024-35250
https://twitter.com/search?q=%23MSKSSRV特権昇格
https://twitter.com/search?q=%23MSKSSRV

https://twitter.com/hashtag/CVE-2024-35250
https://twitter.com/hashtag/MSKSSRV特権昇格
https://twitter.com/hashtag/MSKSSRV


■Exploit Code / PoC

https://www.exploit-db.com/search?q=CVE-2024-35250
https://www.exploit-db.com/search?q=MSKSSRV特権昇格
https://www.exploit-db.com/search?q=MSKSSRV

https://attackerkb.com/search?q=CVE-2024-35250
https://attackerkb.com/search?q=MSKSSRV特権昇格
https://attackerkb.com/search?q=MSKSSRV


Copyright (C) 谷川哲司 (Tetsuji Tanigawa) 2006 - 2022