Zero-day .NET and Nvidia GFE Vulnerabilities Explained

Presented at CarolinaCon Online 2021 Virtual, April 24, 2021, 3 p.m. (45 minutes).

I discovered two logical vulnerabilities that allowed for Local Privilege Escalation (LPE). These vulnerabilities are interesting and recent. I have reported both and have had them both acknowledged by Microsoft and Nvidia. Walking through the process of discovery and then the actual exploit is fun and will show everyone how installing new software will open up systems to more vulnerabilities.


Presenters:

Similar Presentations: