Microsoft Windows Kernel cng.sys Buffer Overflow
Posted by deepcore on October 31, 2020 – 6:05 pm
The Microsoft Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures. It constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape).
Post a reply
You must be logged in to post a comment.