Pwnie Awards 2017

The 2010 Pwnie Award For Best Privilege Escalation Bug

CVE-2010-0232

Tavis Ormandy

One of the most complicated vulnerabilities of 2010, this privilege escalation bug required more than a few tricks to exploit. Its discovery shows a rare understanding of some of the more obscure aspects of the Intel architecture. The bug was present in all versions of Windows from NT 3.1 all the way up to Windows 7.