https://blog.hiveminds.es/en/tags/eop/ Recent content in EoP on The Hive Mind Blog Hugo -- gohugo.io en hiveminds_es@protonmail.com (hiveminds_es) hiveminds_es@protonmail.com (hiveminds_es) ©{year}, All Rights Reserved Tue, 11 Aug 2020 20:00:06 +0100 https://blog.hiveminds.es/en/posts/cve-2020-1337_my_two_cents/ Tue, 11 Aug 2020 20:00:06 +0100 hiveminds_es@protonmail.com (hiveminds_es) Tue, 11 Aug 2020 20:00:06 +0100 https://blog.hiveminds.es/en/posts/cve-2020-1337_my_two_cents/ In January of this year, Peleg Hadar (@peleghd) and Tomer Bar reported to Microsoft, without publicly releasing any details, a Windows Print Spooler vulnerability that could allow privilege elevation from Windows 7 onwards. The security updates intended for that vulnerability (CVE-2020-1048) were released by Microsoft on May 12. On the same day, Alex Ionescu (@aionescu) and Yarden Shafir (@yarden_shafir), who collided discovering the vulnerability, published a very detailed blog post about it: PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth (CVE-2020-1048 & more). neofito Windows EoP CVE-2020-1337 Windows Exploitation