ID:5770 - Exploit for Information disclosure in Windows and Windows Server - CVE-2019-1125
Published: June 17, 2021
Windows
Windows Server
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to gain access to potentially sensitive information and elevate privileges on the system.
The vulnerability exists when certain central processing units (CPU) speculatively access memory. A local user can gain unauthorized access to sensitive information and elevate privileges on the system.
This issue is a variant of the Spectre Variant 1 speculative execution side channel vulnerability that leverages SWAPGS instructions to bypass KPTI/KVA mitigations.