0-day Windows exploit gets published on Twitter

A Twitter user by the name of SandboxEscaper published a zero-day exploit for Windows on GitHub. The vulnerability enables local privilege escalation right to SYSTEM privileges, it basically enables malware or malicious logged-in users to gain access of the system. CERT/CC researcher Will Dormann confirmed the bug affects fully-patched 64-bit Windows 10 systems.

“Microsoft Windows task scheduler contains a vulnerability in the handling of ALPC, which can allow a local user to gain SYSTEM privileges,” the alert stated.

ALPC, Advanced Local Procedure Call, restricts the impact somewhat, since it's a local bug: you have to be already logged in, or running code on, a machine to hijack it. However, it opens an all-too-familiar attack vector: if an attacker can get a target to download and run an app, local privilege escalation gets the malware out of the normal user context up to, in this case, system privileges. Ouch.

Here is the alpc bug as 0day: https://t.co/m1T3wDSvPX I don't fucking care about life anymore. Neither do I ever again want to submit to MSFT anyway. Fuck all of this shit.

— SandboxEscaper (@SandboxEscaper) August 27, 2018

Microsoft is looking into the matter and will update as soon as possible.

Via: The Register