Sploitus

Exploit for Use After Free in Microsoft

CVE-2021-40449

githubexploit · 2022-02-20

Exploit Code

README8 lines
## https://sploitus.com/exploit?id=07E9B4B7-D316-5CFB-BB6E-CAB4F7217BD4
# CVE-2021-40449-NtGdiResetDC-UAF

A POC for CVE-2021-40449.
Only tested on 1809, the code is a bit rough, but it's a good experience for me.
Instead of using the `ThreadName` method, user-space memory allocation is used.

![result.PNG](https://github.com/BL0odz/CVE-2021-40449-NtGdiResetDC-UAF/blob/main/result.PNG?raw=true)