Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrvv-mvjq-gmwq

Опубликовано: 10 нояб. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.

7 High

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 7
nvd
3 дня назад

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.

CVSS3: 7
msrc
3 дня назад

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

7 High

CVSS3

Дефекты

CWE-415