Inside Win32k Exploitation: Background on Implementations of Win32k and Exploitation Methodologies
In late January 2022, social media reports indicated a new Windows privilege escalation vulnerability, CVE-2022-21882, was being exploited in the wild; Unit 42 traced it to the Win32k.sys user-mode callback function xxxClientAllocWindowClassExtraBytes, a...