‘zombie’ Windows Win32k Bug Reanimated By Researcher

Fri, Apr 03, 2020

In a rare find, a researcher has unveiled dozens of related bugs in a core Windows API that could enable attackers to elevate their privileges in the operating system.

A year ago, Gil Dabah promised that he would find over 15 bugs related to the Windows win32k component:

This month I am going to submit around 15 0ds to msft. Wooot

— Gil Dabah (@_arkon) April 1, 2019

This week, he released a report detailing 25 of them:

Guys & girls!Exactly a year ago I promised over 15 bugs in win32k.

You're welcome to read and find out about my biggest research so far: #win32k #SmashTheRef bug class - https://t.co/niPACKBBLd

Check out the paper and the POCs, there are some crazy stuff going on. Promise!

If you are an executive looking for a right IT partnership or you just want to make sure you are taking the correct steps in your decisions feel free to drop us a line. We won’t muddy the waters with tons of biz-speak. But we will bring you a serious return on investment.

Contact QED Systems    or   
Request a Free Quote

QED Systems partners with global leaders in network security and application technologies.