ZDI-23-1643: Microsoft Windows win32kfull UMPDDrvStretchBlt Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-36804.

attacker attackers code cve cves cvss escalation exploit free local local privilege escalation low microsoft microsoft windows order privilege privileged privilege escalation privileges rating system target use-after-free vulnerability windows zdi