VulnerabilitiesrUs

Today, we identified a previously unknown vulnerable driver in the latest update of the software, resulting in a local privilege escalation (LPE) on the latest version tested.

The issue allows a standard user to escalate privileges to NT AUTHORITY\SYSTEM.

The impact does not stop there. We have also confirmed read/write capabilities affecting both physical and virtual memory, alongside additional issues that are still being investigated.

At this time, technical details and the PoC are being withheld while we work to establish a valid coordinated disclosure path with the affected vendor.

If either disclosure platform can help connect us with the appropriate security team, please get in touch. Our goal is to ensure the issue can be responsibly reported, addressed, and users can be protected as quickly as possible.

@Bugcrowd @BugcrowdSupport @Hacker0x01 @kernullist @horsicq @weezerOSINT @0XDbgMan @mrexodia @kernelstub

#togetherwehack #LPE #ResponsibleDisclosure #BugCrowd #BYOVD

Stay safe out there. There's more lurking in the shadows.

0x21ED7623CB59A7A073D143A1222DCD31AAF01FC46E2D24A683D1C085DACB3CD8

PoC video below.

Hey guardians! Good news!

Me and Kyle finally figured out multi-bubble things, so here's one from late last night of Sword Base, please keep in mind though guardians, that this is still wip. There's so much more to come in the future!
Note: The Lighting and decals are not perfect but, it's starting to come together.

Till we meet again, Guardians.

x.com/TempAccountNul…

#Dawn #Sunrise #Reach #Destiny2

Here's a few more screenshots just to help expand on what we're doing.
We love you guardians, until next time :)

@KyleThmpsn

x.com/TempAccountNul…

Guardians, here's a look at what Kyle and I have been working on behind the scenes. More to come. What do you think? #Destiny2 #Guardians #Dawn #ProjectSunrise

Let's go!