Exploit for Untrusted Pointer Dereference in Microsoft

githubexploit · 2023-03-22

Description

Exploit for untrusted pointer dereference causing local privilege escalation on Windows 11 22H2; POC with target process ID.

Affected software

Microsoft Windows 11= 21h2, 22h2

Microsoft Windows Server 2022 All versions

All known vulnerabilities by product

Windows Windows Ancillary Function Driver For Winsock

CVSS 7.8 for CVE-2023-21768

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

86%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

65.4%higher than 99.2% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2026-02-06 05:58

Last Seen:2026-06-13 09:45

Reporter:3yujw7njai

Last commit:2023-03-22

Tags

Windows elevenlocal privilege escalationuntrusted pointer dereferenceproof of concepttarget process identifiersystem privileges

Other exploits for CVE-2023-21768

Exploit for Untrusted Pointer Dereference in Microsoft

2026-06-11 r4uznGITHUB

Exploit for Untrusted Pointer Dereference in Microsoft

2024-05-15 xboxoneresearchGITHUB

Exploit for Untrusted Pointer Dereference in Microsoft

2024-04-07 Ha0-YGITHUB

Exploit for Untrusted Pointer Dereference in Microsoft

2023-04-20 zoemurmureGITHUB

Exploit for Untrusted Pointer Dereference in Microsoft

2023-04-05 h1bAnaGITHUB

Ancillary Function Driver (AFD) For Winsock Privilege Escalation Exploit

2023-03-30 metasploitZDTRuby

Ancillary Function Driver (AFD) For Winsock Privilege Escalation

2023-03-30 Christophe de la Fuente, b33f, Yarden Shafir, chompie, metasploit.comPACKETSTORMRuby

Exploit for Untrusted Pointer Dereference in Microsoft

2023-03-22 CKevensGITHUB

Exploit Code

README9 lines

## https://sploitus.com/exploit?id=2981010C-42C6-536C-99A0-BCFF77182AE7
# CVE-2023-21768-POC  
CVE-2023-21768: Windows 11 22H2 system local privilege escalation, POC  

Usage:  
Windows_AFD_LPE_CVE-2023-21768.exe  

Where:  
The process ID to be elevated (decimal), causing the target process to be elevated to SYSTEM privileges.