A few bugs that I reported to MSRC got patched today. CVE-2024-29050 is listed as being a local attack vector. There are a few limitations, but it is definitely not local only.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29050
| https://twitter.com/hexnomad | |
| Offensive Con Talk | https://youtu.be/1CjQ1_QWssI |
| Windows LPEs writeup | https://hello.fieldeffect.com/hubfs/Blackswan/Blackswan_Technical_Write%20Up_Field_Effect.pdf |
| Field Effect | https://fieldeffect.com/ |
