I will be presenting at THREATCON1 in October, explaining how I figured out how a non-admin user could get code execution as SYSTEM on Windows 11 by way of playing a MIDI file. 😂
threatcon1.org/agenda
Will Dormann is on Mastodon
@wdormann.bsky.social
1.8K followers 253 following 153 posts
I play with vulnerabilities and exploits. While this site initially showed promise, I've grown tired with its lack of improvement. You'll find me @wdormann@infosec.exchange on Mastodon.
![[+] Microsoft Patch Tuesday Stats
[+] https://github.com/Immersive-Labs-Sec/msrc-api
[+] May 2023 Security Updates
[+] Found a total of 49 vulnerabilities
[-] 8 Elevation of Privilege Vulnerabilities
[-] 4 Security Feature Bypass Vulnerabilities
[-] 12 Remote Code Execution Vulnerabilities
[-] 8 Information Disclosure Vulnerabilities
[-] 5 Denial of Service Vulnerabilities
[-] 1 Spoofing Vulnerabilities
[-] 11 Edge - Chromium Vulnerabilities
[+] Found 2 exploited in the wild
[-] CVE-2023-29336 - 6.8 - Win32k Elevation of Privilege Vulnerability
[-] CVE-2023-24932 - 6.2 - Secure Boot Security Feature Bypass Vulnerability
[+] Highest Rated Vulnerabilities
[-] CVE-2023-24941 - 8.5 - Windows Network File System Remote Code Execution Vulnerability
[-] CVE-2023-24943 - 8.5 - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
[+] Found 8 vulnerabilites more likely to be exploited
[-] CVE-2023-24941 -- Windows Network File System Remote Code E](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:yrqmsenafehhze56ojjcii6r/bafkreihkxca6v7igtdge4olllfz3dwumm2bqwx2wbuk7lohq4hmirqkyae)
