{"uuid": "0c1aa949-1c6f-4d4e-ae57-afd0fe041b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1732", "type": "seen", "source": "https://t.me/hacking_Attack/40863", "content": "Black Hat Ethical Hacking\nWindows vulnerability with new public exploits lets you become admin\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Windows vulnerability with new public exploits lets you become adminPost Views: 206 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.\nUsing this vulnerability, threat actors with limited access to a compromised device can easily elevate their privileges to help spread laterally within the network, create new administrative users, or perform privileged commands.\n\nThe vulnerability affects all supported support versions of Windows 10 before the January 2022 Patch Tuesday updates. Researcher releases bypass to patched vulnerabilityAs part of the January 2022 Patch Tuesday, Microsoft fixed a \u2018Win32k Elevation of Privilege Vulnerability\u2019 vulnerability tracked as CVE-2022-21882, which is a bypass for the previously patched and actively exploited CVE-2021-1732 bug.\n\nMicrosoft attributes the discovery of this vulnerability to RyeLv, who shared a technical analysis\u00a0of the vulnerability after Microsoft released the patch.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nRegarding the just-fixed CVE-2022-21882: \nwin32k privilege escalation vulnerability,\nCVE-2021-1732 patch bypass,easy to exploit,which was used by apt attacks\n\n\u2014 b2ahex (@b2ahex) January 12, 2022\nThis week, multiple exploits were publicly released for\u00a0CVE-2022-21882 that allow anyone to gain SYSTEM privileges on vulnerable Windows 10 devices.\n\nAfter the exploit\u2019s release, Will Dormann, a vulnerability analyst for CERT/CC and Twitter\u2019s resident exploit tester, confirmed that the exploits works\u00a0and provides elevated privileges.\n\nBleepingComputer also tested the vulnerability and had no problem compiling the exploit and using it to open Notepad with SYSTEM privileges on Windows 10, as shown below. BleepingComputer could not get the exploit to work on Windows 11.\nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2022-21882/CVE-2022-21882-test.jpg \nBug found two years earlierThis same vulnerability was discovered two years ago\u00a0by Israeli security researcher and Piiano CEO Gil Dabah, who decided not to disclose the bug due to the reduced bug bounty rewards\u00a0by Microsoft.\n\nDabah is not alone in his frustrations over Microsoft\u2019s diminishing bug bounty rewards.\n\nIn[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:57.978398Z"}