vendor:
Windows 10
by:
ACTIVELabs, sailay1996, timwr
7.2
CVSS
HIGH
Local Privilege Escalation
N/A
CWE
Product Name: Windows 10
Affected Version From: Windows 10
Affected Version To: Windows 10
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows
2019
Windows 10 UAC Protection Bypass Via Windows Store (WSReset.exe)
This module exploits a flaw in the WSReset.exe Windows Store Reset Tool. The tool is run with the 'autoElevate' property set to true, however it can be moved to a new Windows directory containing a space (C:Windows System32) where, upon execution, it will load our payload dll (propsys.dll).
Mitigation:
N/A