writeups.xyz / Privilege escalation using the XAML diagnostics API (CVE-2023-36003)

Submitter : c2a

Date: 11 January 2024

Bounty : undisclosed

Vulnerabilities :

• Local Privilege Escalation
• DLL Injection

Programs :

• Microsoft (Windows)

Authors :

• Michael Maltsev (@M417z)

Link :
https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/