Isolate me from sandbox Explore elevation of privilege of CNG Key Isolation

Source provenance. Raw material catalogued for the wiki ingest pipeline. Lives offline at raw_sources/windows-exploit-research/Isolate me from sandbox - Explore elevation of privilege of CNG Key Isolation.md.

Status: catalogued

Excerpt

In recently months, Microsoft patched vulnerabilities I reported in CNG Key Isolation service, assigned CVE-2023-28229 and CVE-2023-36906, the CVE-2023-28229 included 6 use after free vulenrabilities with similar root cause and the CVE-2023-36906 is a out of bound read information disclosure. Microsoft marked them as “Exploitation Less Likely” in assessment status, but actually, I completed the ex…

Likely wiki targets

Pending — this source has not yet been distilled into wiki pages. Future ingest can populate links to the concept / technique / CVE pages this material would inform.