A Series of Windows Kernel Bugs in a Single Function

Introduction

During the analysis of Windows kernel vulnerabilities, I’ve recognized more than 5 bugs have existed in a single function EtwpNotifyGuid. The bugs are CVE-2020-1033, CVE-2020-1034, CVE-2021- 1662, CVE-2021-1682 and so on. It is so amazing fact that more than 5 bugs exists in a single Windows kernel function.

This post will deep dive into the details of the vulnerabilities and the fixes released by Microsoft.

25bK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6T1L8r3!0Y4i4K6u0W2j5Y4t1H3N6Y4k6F1L8W2)9J5k6h3W2G2i4K6u0r3M7r3q4Y4k6i4y4Q4x3V1k6T1L8r3!0Y4M7r3!0K6N6q4)9J5k6h3q4K6M7s2S2Q4x3@1k6A6k6q4)9K6c8o6b7`.

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课