Researcher Name: k0shl
Link:
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1648
- https://whereisk0shl.top/post/the_story_of_cve_2021_1648.
CVE: CVE-2021-1648
CVE-2021-1648 includes three vulnerabilities, an arbitrary address read information disclosure, an arbitrary heap base address read information disclosure, and an arbitrary heap base address write escalation of privilege. All of them exist in ALPC service and can easily lead to escape from IE sandbox. An exciting part of this CVE is that the issue service is a special service. This service runs on an x86-64 Windows system but is compatible with x86 os.