Windows | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Windows Kernel: Exploit CVE-2022-35803 in Common Log File System	Windows Local Privilege Escalation Type Confusion	Microsoft	Luckyu (@Uuulucky)
Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)	Local Privilege Escalation Windows	Microsoft	Kuba Gretzky (@Mrgretzky)
Technical Analysis of Windows CLFS Zero-Day Vulnerability CVE-2022-37969 - Part 1: Root Cause Analysis	Local Privilege Escalation Windows	Microsoft	Zscaler Threatlabz (@Threatlabz)
Abusing Windows’ tokens to compromise Active Directory without touching LSASS	Local Privilege Escalation Windows Active Directory Privilege Escalation	Undisclosed	Aurélien Chalot (@Defte_)
Cold Hard Cache — Bypassing RPC Interface Security with Cache Abuse	Privilege Escalation Windows	Microsoft	-
New Attack Paths? AS Requested Service Tickets	Local Privilege Escalation Windows Kerberos Active Directory	Microsoft	Charlie Clark (@Exploitph)
Skype for Business Audit Part 1 - SKYPErsistence	Local Privilege Escalation Windows Security Code Review	Microsoft	Florian Hauser (@Frycos)
Exploiting a Seagate service to create a SYSTEM shell (CVE-2022-40286)	Local Privilege Escalation Windows Driver Hacking	Seagate	X86matthew (@X86matthew)
Diving Into Pre-created Computer Accounts	Active Directory Local Privilege Escalation Windows	Undisclosed	Oddvar Moe (@Oddvarmoe)
Certified Pre-Owned	Active Directory Privilege Escalation ADCS Windows	Microsoft	Will Schroeder (@Harmj0y) Lee Christensen (@Tifkin_)
BitLocker Lockscreen bypass	Lock Screen Bypass Local Privilege Escalation Windows	Microsoft	Jonas L (@JonasLyk)
MS Enterprise app management service RCE. CVE-2022-35841	RCE Local Privilege Escalation Windows	Microsoft	Ceri Coburn (@_Ethicalchaos_)
CVE-2020-1337 – PrintDemon is dead, long live PrintDemon!	Local Privilege Escalation Windows	Microsoft	Paolo Stagno (@Void_Sec)
One Click to Compromise -- Fun With ClickOnce Deployment Manifests	NTLMv2 Hash Disclosure One-Click Execution of Arbitrary .Net Assemblies Windows	Microsoft	Dave Cossa (@G0ldenGunSec)
CVE-2020–1088 — Yet another arbitrary delete EoP	Local Privilege Escalation Windows	Microsoft	Søren Fritzbøger (@Fritzboger)

Page 2 of 2