Exploit for Sensitive Data Storage in Improperly Locked Memory in Microsoft CVE-2023-28229

Name: Exploit for Sensitive Data Storage in Improperly Locked Memory in Microsoft CVE-2023-28229
Rating: 5 (504 reviews)

2023-09-04 | CVSS 7.0

## https://sploitus.com/exploit?id=75BFBED8-0392-5DBC-B1EE-9C865A2FB2C7
# CVE-2023-28229

Windows CNG KeyIso RPC EoP/SBX   
Discovered by: [@k0shl](https://twitter.com/KeyZ3r0)   
Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation

![](gg.png)

If compilation fails, rename `rpc.h` to something else because I didn't realise `rpc.h` is a standard include in Windows!