{"metadata": {"vulnerability": "cve-2023-21768", "count": 102, "kinds": {"milestone": 7, "sighting": 70, "kev": 0, "other": 25}}, "data": [{"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-21768", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-21768", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21768", "record": "MSRC_CVE-2023-21768", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21768", "record": "MSRC_CVE-2023-21768", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2023-21768", "field": "containers.cna.datePublic"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21768", "record": "MSRC_CVE-2023-21768", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21768", "record": "MSRC_CVE-2023-21768", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-10T22:15:00Z", "date_only": false, "value": "2023-01-10T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J69V-7PJ3-VG67", "record": "GHSA-J69V-7PJ3-VG67", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-10T22:15:00Z", "date_only": false, "value": "2023-01-10T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-21768", "record": "GSD-2023-21768", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-10T22:15:19.367Z", "date_only": false, "value": "2023-01-10T22:15:19.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21768", "record": "FKIE_CVE-2023-21768", "field": "published"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-10T23:00:00Z", "date_only": false, "value": "2023-01-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "last_revision_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "initial_release_date"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0022", "record": "CERTFR-2023-AVI-0022", "field": "revisions.0.revision_date"}, {"timestamp": "2023-01-11T00:30:45Z", "date_only": false, "value": "2023-01-11T00:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J69V-7PJ3-VG67", "record": "GHSA-J69V-7PJ3-VG67", "field": "published"}, {"timestamp": "2023-01-11T00:30:45Z", "date_only": false, "value": "2023-01-11T00:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J69V-7PJ3-VG67", "record": "GHSA-J69V-7PJ3-VG67", "field": "modified"}, {"timestamp": "2023-01-11T00:34:47Z", "date_only": false, "value": "2023-01-11T00:34:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/56273", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "2f157f01-888a-456d-9d3e-d6ce62a283c2", "content": "\u203c CVE-2023-21768 \u203c\n\nWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/56273"}, {"timestamp": "2023-01-31T23:00:00Z", "date_only": false, "value": "2023-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-03-08T16:03:26Z", "date_only": false, "value": "2023-03-08T16:03:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3893", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "62849df9-fb6d-40fd-aacf-304bfab48e59", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aLPE exploit for CVE-2023-21768\nURL\uff1ahttps://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3893"}, {"timestamp": "2023-03-08T21:11:41Z", "date_only": false, "value": "2023-03-08T21:11:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qj-A_JpjeTESR9XnHsIATmuynJb6gimku9PdFzo94mm1U94", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "2bf69b9a-a1df-449e-92b7-ce48ef1a6931"}, {"timestamp": "2023-03-08T21:59:31Z", "date_only": false, "value": "2023-03-08T21:59:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/road_to_oscp/193", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "c8e31f60-5e12-48da-85a9-680b9e0c0e24", "content": "CVE-2023-21768: Windows 11 LPE\n\nhttps://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768", "url": "https://t.me/road_to_oscp/193"}, {"timestamp": "2023-03-08T22:54:10Z", "date_only": false, "value": "2023-03-08T22:54:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1314", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "5d376298-6974-448a-a21c-c4df5b3e248c", "content": "CVE-2023-21768: Windows 11 LPE\n\nhttps://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768\n\n#exploit #lpe #redteam #pentest #git", "url": "https://t.me/RalfHackerChannel/1314"}, {"timestamp": "2023-03-09T06:57:20Z", "date_only": false, "value": "2023-03-09T06:57:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h-IewMpqXJNVydldZ_FfbpMCKXSvbFJ0vXG9PT0omE5Wbl8", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "80e9d6ed-267d-4ec7-9c2b-878b265821dd"}, {"timestamp": "2023-03-09T09:30:40Z", "date_only": false, "value": "2023-03-09T09:30:40.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/u8qFNnGbmdhDbRieM14DKohWAZiXdZjBzXfZcPy9kpGgbAw", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "57718e14-6f35-42b9-bff7-4db7fb53dc95"}, {"timestamp": "2023-03-09T10:12:44Z", "date_only": false, "value": "2023-03-09T10:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2404", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "80576fd5-4c97-473d-a55b-585250a099f6", "content": "LPE exploit for CVE-2023-21768\n\nWindows Ancillary Function Driver for WinSock Elevation of Privilege\n\nhttps://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768", "url": "https://t.me/dilagrafie/2404"}, {"timestamp": "2023-03-09T11:05:16Z", "date_only": false, "value": "2023-03-09T11:05:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7892", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "deb2dd6b-6232-4501-9871-6fd45797a75c", "content": "#exploit\n1. CVE-2023-25355/25356:\nVulnerabilities in CoreDial sipXcom sipXopenfire\nhttps://seclists.org/fulldisclosure/2023/Mar/5\n\n2. CVE-2023-21768:\nWindows 11 22H2 LPE\nhttps://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768\nhttps://github.com/xforcered/Windows_LPE_AFD_CVE-2023-21768", "url": "https://t.me/CyberSecurityTechnologies/7892"}, {"timestamp": "2023-03-09T20:55:04Z", "date_only": false, "value": "2023-03-09T20:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sTV3Qh1CaZPI1NLF_PgpTwtNz6qewWgLjuQsfZKPTYimZ-o", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "9280656d-f1f7-4b68-bace-e18d12fb4629"}, {"timestamp": "2023-03-09T21:17:19Z", "date_only": false, "value": "2023-03-09T21:17:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6TzNeNsBA7NzqsLL4aY7PNfu8Lpw9GaJ5C32jG5_P4CQkqc", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "37d50fce-5fef-4216-879d-4c664ef45998"}, {"timestamp": "2023-03-10T20:25:46Z", "date_only": false, "value": "2023-03-10T20:25:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3915", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "2c110201-8b8a-4b8c-982f-3c868437d5ca", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aUsing CVE-2023-21768 to manual map kernel mode driver \nURL\uff1ahttps://github.com/SamuelTulach/nullmap\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3915"}, {"timestamp": "2023-03-10T23:09:00Z", "date_only": false, "value": "2023-03-10T23:09:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3916", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "6551c81c-562a-408f-9490-08f09b4653a4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aUsing CVE-2023-21768 to manual map kernel mode driver \nURL\uff1ahttps://github.com/b11y/CVE-2023-21823\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3916"}, {"timestamp": "2023-03-11T07:49:52Z", "date_only": false, "value": "2023-03-11T07:49:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hydral0gs/1235", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "66a5d520-f55c-44fd-b856-89f297241f6d", "content": "\ud83d\udd25\ud83d\udd25\ud83d\udd25CVE-2023-21768(Windows Ancillary Function Driver for WinSock EoP) PoC exploit.\nComplete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems.\n\nUsage:\nWindows_AFD_LPE_CVE-2023-21768.exe ", "url": "https://t.me/hydral0gs/1235"}, {"timestamp": "2023-03-12T22:59:23Z", "date_only": false, "value": "2023-03-12T22:59:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/malwar3s/37", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "9f574fea-8363-4425-990e-e55573a1b4d1", "content": "https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768", "url": "https://t.me/malwar3s/37"}, {"timestamp": "2023-03-13T20:37:19Z", "date_only": false, "value": "2023-03-13T20:37:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3938", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "df96f061-4883-489d-bfb5-d785ff4e1996", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aWindows_AFD_LPE_CVE-2023-21768\nURL\uff1ahttps://github.com/Malwareman007/CVE-2023-21768\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3938"}, {"timestamp": "2023-03-27T10:59:28Z", "date_only": false, "value": "2023-03-27T10:59:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/534", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "28e1beee-2344-4202-aa87-0b94b03aa53a", "content": "\ud83d\udc68\u200d\ud83d\udcbb \u0412\u0430\u0436\u043d\u044b\u0435 APT-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0434\u0435\u043b\u0438\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f APT \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435, \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0435 \u0438 \u0441\u0435\u043b\u044c\u0441\u043a\u043e\u0445\u043e\u0437\u044f\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u041a\u0440\u044b\u043c\u0443, \u041b\u0443\u0433\u0430\u043d\u0441\u043a\u0435 \u0438 \u0414\u043e\u043d\u0435\u0446\u043a\u0435. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0430 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432: PowerMagic, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Powershell \u0438 \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a CommonMagic, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b \u0438 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441\u043e \u0441\u044a\u0435\u043c\u043d\u044b\u0445 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u2013 \u0434\u043b\u044f C2 \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f Dropbox \u0438 OneDrive. IOC \u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u0430 Securelist.\n\nAPT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 APT41/Gallium \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.  \u0412\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 MS Exchange, \u043e\u043d \u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0435\u0432\u0430\u043b\u043e\u0447\u043d\u043e\u0433\u043e \u043f\u0443\u043d\u043a\u0442\u0430 \u043f\u0440\u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e\u043d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u043c mimikatz, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u043a \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u044f\u043c\u043e \u0432 LSASS.\n\n\u041d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u04212 \u0438 TTP APT37/Scarcruft/Reaper \u2013 \u0440\u0430\u0437, \u0434\u0432\u0430 \u2013 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u0447\u0430\u044f\u043d\u043d\u043e \u0441\u043b\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 Github-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439\ud83e\udd26\u200d\u2642\ufe0f. \u0421\u0440\u0435\u0434\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u043e\u043a \u2013 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 CHM, HTA, HWP (Hancom office), XLL (MS Excel Add-in).\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u044f \u043e\u0442 \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0441\u0430\u043d\u0442\u0430\u043c, \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e Magecart \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u043e\u0441\u044c \u043d\u043e\u0432\u044b\u043c \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440\u043e\u043c Kritec, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Websockets \u0438 \u043f\u0440\u0438\u043a\u0438\u0434\u044b\u0432\u0430\u0435\u0442\u0441\u044f Google Tag Manager.  \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e Mage\u0441art \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0442\u043e\u0440\u043e\u043c Hunter, \u043f\u043e\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u0442\u0430\u043d\u0435\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u043b\u043e\u0436\u043d\u0435\u0435. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411:\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0433\u0438\u0434 \u043f\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2023-23397 \u0432 Outlook.  \u041a\u0440\u043e\u043c\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u043c\u0438\u0442\u0438\u0433\u0430\u0446\u0438\u0438, \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 TTP \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430 Pwn2Own \u0432 \u0412\u0430\u043d\u043a\u0443\u0432\u0435\u0440\u0435 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043e\u0434\u043d\u0443 \u00ab\u0422\u0435\u0441\u043b\u0443\u00bb. \u041b\u0438\u0434\u0435\u0440\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0437\u0430\u0447\u0451\u0442\u0430 \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0441\u0451\u0440\u0447\u0435\u0440\u044b Synacktiv, \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u0432\u0448\u0438\u0435 \u043e\u043a\u043e\u043b\u043e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u043e\u0431\u0449\u0435\u0439 \u0441\u0443\u043c\u043c\u044b \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 27 \u0431\u0430\u0433\u043e\u0432,  \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 Tesla \u0438 Windows 11.\n\n\u0422\u0440\u0438\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c CloudPanel \u0434\u0435\u043b\u0430\u0435\u0442 \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u043f\u043e\u0434 \u0435\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u043f\u0430\u0440\u043e\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2013 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e SSL-\u043a\u043b\u044e\u0447\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 CloudPanel \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u0438 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 CloudPanel, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0444\u0430\u0439\u0440\u0432\u043e\u043b \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041f\u043e\u043b\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 CloudPanel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0437\u0430\u043c\u0435\u043d\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430 \u0438 \u0437\u0430\u043c\u0435\u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \n\n\u0415\u0449\u0451 \u0440\u0430\u0437 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0443 \u00ab\u0437\u0430 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435\u0439 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0441\u0440\u0435\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432\u00bb, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IBM \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0441\u0443\u0442\u043a\u0438 \u0440\u0435\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-21768 \u0432 Winsock, \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 Microsoft \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0418, \u043d\u0435 \u043e\u0442\u043f\u0443\u0441\u043a\u0430\u044f \u0442\u0435\u043c\u0443 Microsoft, \u0434\u043b\u044f Windows 11 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0439 aCropalypse (CVE-2023-28303), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u044b\u0445 (cropped) \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u0445 PNG, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u00ab\u043d\u043e\u0436\u043d\u0438\u0446\u0430\u043c\u0438\u00bb Windows. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u0431\u0430\u0433 \u0432 Google Pixel \u0437\u0430\u043a\u0440\u044b\u0442 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Google.\n\n@\u041f2\u0422 #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442", "url": "https://t.me/kasperskyb2b/534"}, {"timestamp": "2023-03-29T11:37:31Z", "date_only": false, "value": "2023-03-29T11:37:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3AWN1C7WszyJvwER210s3dqhKR1Naub4BBQREkbiaZTgqNo", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "aa4a1139-6249-43f1-a6bd-b260acf56596"}, {"timestamp": "2023-03-30T16:58:43Z", "date_only": false, "value": "2023-03-30T16:58:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2023_21768_afd_lpe.rb", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "e6304785-eb2b-44ed-b020-19837fa48768", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2023_21768_afd_lpe.rb"}, {"timestamp": "2023-04-01T10:49:26Z", "date_only": false, "value": "2023-04-01T10:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1943", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "a5512af2-4b20-4cb4-ae58-189affa2a0ab", "content": "CVE-2023-21768(Windows Ancillary Function Driver for WinSock EoP) PoC exploit.\nComplete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems.\n\nUsage:\nWindows_AFD_LPE_CVE-2023-21768.exe ", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1943"}, {"timestamp": "2023-04-06T01:32:35Z", "date_only": false, "value": "2023-04-06T01:32:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverse_dungeon/2986", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "6009b09b-541a-4320-bd8d-f94aadbe60ca", "content": "https://windows-internals.com/i-o-rings-when-one-i-o-operation-is-not-enough\n\nhttps://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/\n\nhttps://windows-internals.com/one-year-to-i-o-ring-what-changed\n\nhttps://github.com/h1bAna/CVE-2023-21768\n\nhttps://securityintelligence.com/posts/patch-tuesday-exploit-wednesday-pwning-windows-ancillary-function-driver-winsock/", "url": "https://t.me/reverse_dungeon/2986"}, {"timestamp": "2023-04-11T09:30:01Z", "date_only": false, "value": "2023-04-11T09:30:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SIWyXKvT0Q6Uz-bsgnRMW2gKDzRQC0pWbNkqsYd4SsYotfc", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "1f9a2eef-da88-4a40-8390-c383a8179a31"}, {"timestamp": "2023-04-11T22:28:05Z", "date_only": false, "value": "2023-04-11T22:28:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-Cafirqz-p7NdQcLIwGXViHBuMY-qjUV70cOU-b_tSFeBMs", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "08bc71d1-49c0-43d5-b879-18a6440d81e3"}, {"timestamp": "2023-04-15T16:48:06Z", "date_only": false, "value": "2023-04-15T16:48:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9ZqSlYWgpWYjGSCECsQ28TgVDX17APwQcLiOnmoAofcpXBc", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "3d6ed7e2-9a20-45f2-b5b0-7d1b054d5ed3"}, {"timestamp": "2023-04-15T16:53:41Z", "date_only": false, "value": "2023-04-15T16:53:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/G9x3P-SMV0k8GNsiXWJursBq0vZk7QlvoiyZ9kYn8mw6hR4", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "cef3bdbe-bd68-4c9b-8800-f56463f7a39e"}, {"timestamp": "2023-04-27T19:15:00Z", "date_only": false, "value": "2023-04-27T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-21768", "record": "GSD-2023-21768", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-18T16:28:36Z", "date_only": false, "value": "2023-05-18T16:28:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/578", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "1da3d60e-5e12-4050-be7a-15811f2b7f7b", "content": "https://github.com/xforcered/Windows_LPE_AFD_CVE-2023-21768\nwin\u5185\u6838\u63d0\u6743\u6f0f\u6d1e", "url": "https://t.me/CNArsenal/578"}, {"timestamp": "2023-05-20T00:26:09Z", "date_only": false, "value": "2023-05-20T00:26:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4799", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "b7338c2d-d71d-46ed-801e-cb791eb63a1e", "content": "CVE-2023-21768\n\nLPE exploit for CVE-2023-21768\n\nGithub\n\n#CVE #Exploit #lpe\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4799"}, {"timestamp": "2023-09-10T07:38:39Z", "date_only": false, "value": "2023-09-10T07:38:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4004", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "64e58588-8d41-4b7b-8a96-771cf9bfd0e9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21768 Windows 11 22H2 \u7cfb\u7edf\u672c\u5730\u63d0\u6743 POC\nURL\uff1ahttps://github.com/CKevens/CVE-2023-21768-POC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4004"}, {"timestamp": "2023-12-13T01:20:26.155Z", "date_only": false, "value": "2023-12-13T01:20:26.155224Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-21768", "record": "GSD-2023-21768", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T15:07:00Z", "date_only": false, "value": "2023-12-18T15:07:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2008", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "12e7bb4e-ec6d-4936-bbd9-3c21ef2c9e19", "content": "#ExploitObserverAlert\n\nCVE-2023-21768\n\nDESCRIPTION: Exploit Observer has 30 entries related to CVE-2023-21768. Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.016680000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/2008"}, {"timestamp": "2024-08-02T09:51:50.242Z", "date_only": false, "value": "2024-08-02T09:51:50.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-21768", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-28T19:30:05Z", "date_only": false, "value": "2024-08-28T19:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6144", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "56575ce6-fc16-4255-9fdd-79771b768c1b", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c SafeBreach \u0410\u043b\u043e\u043d \u041b\u0435\u0432\u0438\u0435\u0432 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u00a0Windows Downdate, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows 10, Windows 11 \u0438 Windows Server.\n\n\u041a\u0430\u043a \u043c\u044b \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0432 \u0445\u043e\u0434\u0435 \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0442\u0430\u0440\u044b\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u041f\u041e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nWindows Downdate \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python \u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 Windows.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Hyper-V (\u0434\u043e \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438), \u044f\u0434\u0440\u0430 Windows, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NTFS \u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Filter Manager (\u0434\u043e \u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0439, Windows Downdate \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043e\u0442\u043a\u0430\u0442\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f CVE-2021-27090, CVE-2022-34709, CVE-2023-21768 \u0438 PPLFault, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u044f\u0434\u0440\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a UEFI VBS.\n\n\u0420\u0430\u043d\u0435\u0435 \u041b\u0435\u0432\u0438\u0435\u0432 \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u043e\u0432\u0430\u043b \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Windows Downdate \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-21302 \u0438 CVE-2024-38202 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2024.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0433\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e EDR, \u0430 \u0426\u0435\u043d\u0442\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0430\u0442\u044c, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 (\u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (KB5041773) \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows Secure Kernel Mode CVE-2024-21302, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-38202 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0442\u0435\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Windows.\n\n\u0414\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 Windows.", "url": "https://t.me/true_secator/6144"}, {"timestamp": "2024-08-29T19:16:11Z", "date_only": false, "value": "2024-08-29T19:16:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/S_E_Reborn/5065", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "81d4af59-f6fe-4cb3-8165-b7e75bfba2a2", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c SafeBreach \u0410\u043b\u043e\u043d \u041b\u0435\u0432\u0438\u0435\u0432 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u00a0Windows Downdate, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows 10, Windows 11 \u0438 Windows Server.\n\n\u041a\u0430\u043a \u043c\u044b \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0432 \u0445\u043e\u0434\u0435 \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0442\u0430\u0440\u044b\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u041f\u041e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nWindows Downdate \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python \u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 Windows.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Hyper-V (\u0434\u043e \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438), \u044f\u0434\u0440\u0430 Windows, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NTFS \u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Filter Manager (\u0434\u043e \u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0439, Windows Downdate \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043e\u0442\u043a\u0430\u0442\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f CVE-2021-27090, CVE-2022-34709, CVE-2023-21768 \u0438 PPLFault, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u044f\u0434\u0440\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a UEFI VBS.\n\n\u0420\u0430\u043d\u0435\u0435 \u041b\u0435\u0432\u0438\u0435\u0432 \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u043e\u0432\u0430\u043b \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Windows Downdate \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-21302 \u0438 CVE-2024-38202 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2024.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0433\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e EDR, \u0430 \u0426\u0435\u043d\u0442\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0430\u0442\u044c, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 (\u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (KB5041773) \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows Secure Kernel Mode CVE-2024-21302, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-38202 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0442\u0435\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Windows.\n\n\u0414\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 Windows.", "url": "https://t.me/S_E_Reborn/5065"}, {"timestamp": "2024-10-08T17:58:46.346Z", "date_only": false, "value": "2024-10-08T17:58:46.346936Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-21768", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-08T17:58:46.346Z", "date_only": false, "value": "2024-10-08T17:58:46.346936Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21768", "record": "FKIE_CVE-2023-21768", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-08T17:59:00.517Z", "date_only": false, "value": "2024-10-08T17:59:00.517Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-21768", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-11T00:20:33Z", "date_only": false, "value": "2024-11-11T00:20:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/1540", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "8d1c86b3-d0e1-4bc9-b916-8f3cfb312c9e", "content": "https://github.com/xforcered/Windows_LPE_AFD_CVE-2023-21768", "url": "https://t.me/club31337/1540"}, {"timestamp": "2025-01-01T00:35:27.505Z", "date_only": false, "value": "2025-01-01T00:35:27.505Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-21768", "record": "MSRC_CVE-2023-21768", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-01T00:36:09.440Z", "date_only": false, "value": "2025-01-01T00:36:09.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-21768", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-01T00:36:09.440Z", "date_only": false, "value": "2025-01-01T00:36:09.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2023-21768", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "d71203e8-ae1a-408f-9a9d-3d3184dbd3dd"}, {"timestamp": "2025-02-23T04:10:50Z", "date_only": false, "value": "2025-02-23T04:10:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "10120aea-48a0-423f-b2b9-c5296de446aa"}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-15T11:39:23.656Z", "date_only": false, "value": "2025-05-15T11:39:23.656+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0055", "record": "WID-SEC-W-2023-0055", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "16d11d1c-dcfd-4e76-927c-831c42b5bcf9"}, {"timestamp": "2026-06-17T05:33:56.107Z", "date_only": false, "value": "2026-06-17T05:33:56.107", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21768", "record": "FKIE_CVE-2023-21768", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:37.724Z", "date_only": false, "value": "2026-07-29T12:00:37.724498Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11156", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "f64a2b25-f70f-4c31-aaa0-f14bc729889f", "url": "https://t.me/CVEhub/11156"}, {"timestamp": "2026-07-29T12:00:42.537Z", "date_only": false, "value": "2026-07-29T12:00:42.537000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9935", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "7781f83a-a067-4345-b692-211fe786b128", "url": "https://t.me/CVEhub/9935"}, {"timestamp": "2026-07-29T12:00:47.607Z", "date_only": false, "value": "2026-07-29T12:00:47.607603Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8868", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "cf0ff733-f43c-427d-b4fc-c5a44f95a7f4", "url": "https://t.me/CVEhub/8868"}, {"timestamp": "2026-07-29T12:00:47.934Z", "date_only": false, "value": "2026-07-29T12:00:47.934194Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8748", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "96f3568d-f289-4dcf-90c1-b439251d8d8a", "url": "https://t.me/CVEhub/8748"}, {"timestamp": "2026-07-29T12:00:49.654Z", "date_only": false, "value": "2026-07-29T12:00:49.654699Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8055", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "4f8c0489-6e77-453c-95ff-861d743bb00d", "url": "https://t.me/CVEhub/8055"}, {"timestamp": "2026-07-29T12:00:51.228Z", "date_only": false, "value": "2026-07-29T12:00:51.228319Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/7683", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "13e674c8-5b79-477a-892e-ff723bb83b20", "url": "https://t.me/CVEhub/7683"}, {"timestamp": "2026-07-29T12:03:19.533Z", "date_only": false, "value": "2026-07-29T12:03:19.533176Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/1579", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "d6e7b150-d1a5-4033-a03b-df204bbca0c9", "url": "https://t.me/sysadm_in_up/1579"}, {"timestamp": "2026-07-30T00:01:03.548Z", "date_only": false, "value": "2026-07-30T00:01:03.548165Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11156", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "888f70b5-761a-4fa3-a4cc-0731ca1ba175", "url": "https://t.me/CVEhub/11156"}, {"timestamp": "2026-07-30T00:01:12.555Z", "date_only": false, "value": "2026-07-30T00:01:12.555944Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9935", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "6c3b07f8-acda-43d5-a1c9-dae02e43b67f", "url": "https://t.me/CVEhub/9935"}, {"timestamp": "2026-07-30T00:01:17.425Z", "date_only": false, "value": "2026-07-30T00:01:17.425544Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8868", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "09252da1-3544-4031-a78b-d872b02b313b", "url": "https://t.me/CVEhub/8868"}, {"timestamp": "2026-07-30T00:01:18.634Z", "date_only": false, "value": "2026-07-30T00:01:18.634049Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8748", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "08236209-82f0-42ec-b7ef-d7c31da1383e", "url": "https://t.me/CVEhub/8748"}, {"timestamp": "2026-07-30T00:01:21.406Z", "date_only": false, "value": "2026-07-30T00:01:21.406278Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8055", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "5b3a7728-9aa8-4d2e-be31-82e8f8737f87", "url": "https://t.me/CVEhub/8055"}, {"timestamp": "2026-07-30T00:01:25.458Z", "date_only": false, "value": "2026-07-30T00:01:25.458853Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/7683", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "d26a7c02-84ba-4c0d-851c-836e79849ada", "url": "https://t.me/CVEhub/7683"}, {"timestamp": "2026-07-30T00:03:05.253Z", "date_only": false, "value": "2026-07-30T00:03:05.253204Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/1579", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "d4fd28ba-82dd-4204-9fed-b9d37fe21d0b", "url": "https://t.me/sysadm_in_up/1579"}, {"timestamp": "2026-07-31T05:00:04.506Z", "date_only": false, "value": "2026-07-31T05:00:04.506313Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11156", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "18ae4ae3-793c-4b26-9e92-4089dbad7794", "url": "https://t.me/CVEhub/11156"}, {"timestamp": "2026-07-31T09:00:04.372Z", "date_only": false, "value": "2026-07-31T09:00:04.372065Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9935", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "8706f25c-6fbd-4eed-aaaf-1791593f0320", "url": "https://t.me/CVEhub/9935"}, {"timestamp": "2026-07-31T13:00:04.151Z", "date_only": false, "value": "2026-07-31T13:00:04.151719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8868", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "456b461f-99df-4fe7-b797-0fbd6af19773", "url": "https://t.me/CVEhub/8868"}, {"timestamp": "2026-07-31T14:00:05.278Z", "date_only": false, "value": "2026-07-31T14:00:05.278506Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8748", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "fa9f8290-affa-452d-838d-c4535822a4b9", "url": "https://t.me/CVEhub/8748"}, {"timestamp": "2026-07-31T16:00:04.095Z", "date_only": false, "value": "2026-07-31T16:00:04.095736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8055", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "e0fd7bc7-e1c7-426d-9dbf-18fbf2f37098", "url": "https://t.me/CVEhub/8055"}, {"timestamp": "2026-07-31T17:00:03.935Z", "date_only": false, "value": "2026-07-31T17:00:03.935012Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/7683", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "66e0b97e-cb69-4203-8d52-c137d5925adc", "url": "https://t.me/CVEhub/7683"}, {"timestamp": "2026-08-01T00:00:26.750Z", "date_only": false, "value": "2026-08-01T00:00:26.750953Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/7683", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "cf09ff97-aa06-4e06-9577-59f76ebbb659", "url": "https://t.me/CVEhub/7683"}, {"timestamp": "2026-08-01T00:00:28.205Z", "date_only": false, "value": "2026-08-01T00:00:28.205147Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8055", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "010d9052-b136-47a7-8725-8579afefc816", "url": "https://t.me/CVEhub/8055"}, {"timestamp": "2026-08-01T00:00:30.798Z", "date_only": false, "value": "2026-08-01T00:00:30.798052Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8748", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "3b7bb067-678a-44ae-ab5c-b7057f07bd48", "url": "https://t.me/CVEhub/8748"}, {"timestamp": "2026-08-01T00:00:31.234Z", "date_only": false, "value": "2026-08-01T00:00:31.234989Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8868", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "7fffc890-9699-4e3a-a164-d902b6a0bbd2", "url": "https://t.me/CVEhub/8868"}, {"timestamp": "2026-08-01T00:00:36.260Z", "date_only": false, "value": "2026-08-01T00:00:36.260265Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9935", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "9c1fa633-378d-4fff-a971-152d98339d73", "url": "https://t.me/CVEhub/9935"}, {"timestamp": "2026-08-01T00:00:41.627Z", "date_only": false, "value": "2026-08-01T00:00:41.627774Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11156", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "1678afc9-ff8c-4766-b215-2be2d447e0b9", "url": "https://t.me/CVEhub/11156"}, {"timestamp": "2026-08-04T03:00:05.329Z", "date_only": false, "value": "2026-08-04T03:00:05.329082Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/1579", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "86d89c8f-d935-45af-b630-d40e5900dea0", "url": "https://t.me/sysadm_in_up/1579"}, {"timestamp": "2026-08-05T00:00:57.369Z", "date_only": false, "value": "2026-08-05T00:00:57.369752Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/1579", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "b4114764-faf2-4d67-a577-ee47392a9d57", "url": "https://t.me/sysadm_in_up/1579"}, {"timestamp": "2026-08-27T12:00:06.886Z", "date_only": false, "value": "2026-08-27T12:00:06.886071Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "424941aa-0436-4c90-b71a-d85ba586cace"}, {"timestamp": "2026-08-29T00:00:29.304Z", "date_only": false, "value": "2026-08-29T00:00:29.304967Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "c29aee5f-8fd4-47bc-a1db-406a40bd3b71"}, {"timestamp": "2026-09-01T20:01:02.976Z", "date_only": false, "value": "2026-09-01T20:01:02.976838Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/94307", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "619699ad-754b-4878-9273-53b3a636ee4f", "url": "https://t.me/hacking_Attack/94307"}, {"timestamp": "2026-09-02T16:00:04.510Z", "date_only": false, "value": "2026-09-02T16:00:04.510238Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "7660210a-a059-4e67-9b18-db20c3c74cf2"}, {"timestamp": "2026-09-03T00:00:42.276Z", "date_only": false, "value": "2026-09-03T00:00:42.276160Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "e4cadabf-9a9b-47a7-ba8b-c3ae98734d97"}, {"timestamp": "2026-09-04T20:00:05.358Z", "date_only": false, "value": "2026-09-04T20:00:05.358380Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/94307", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "006badaf-d95e-45ba-8e88-d81ec4847387", "url": "https://t.me/hacking_Attack/94307"}, {"timestamp": "2026-09-07T04:00:04.768Z", "date_only": false, "value": "2026-09-07T04:00:04.768633Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PZ4h1bEYzQUZNpz5jejfcfkAUPMGmF2SrshkVKYlc3YG-0E", "record": "CVE-2023-21768", "field": "creation_timestamp", "uuid": "a8ae2f21-b3b3-4abd-8328-ff2b48c35bc2"}]}