### CVE-2021-34486

#### 描述

Windows事件追踪提权漏洞

#### 影响版本

| Product             | CPU Architecture | Version | Update | Tested   |
| ------------------- | ---------------- | ------- | ------ | -------- |
| Windows 10          | x86/x64          |         |        |          |
| Windows 10          | x86/x64/AMD64    | 1809    |        |          |
| Windows 10          | x86/x64/AMD64    | 1909    |        | &#10004; |
| Windows 10          | x86/x64/AMD64    | 2004    |        |          |
| Windows 10          | x86/x64/AMD64    | 20H2    |        |          |
| Windows 10          | x86/x64/AMD64    | 21H1    |        |          |
| Windows Server 2019 |                  |         |        |          |
| Windows Server      |                  | 2004    |        |          |
| Windows Server      |                  | 20H2    |        |          |

#### 修复补丁

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34486
```

#### 利用方式

编译环境

- VS2019（V142）X64 Release

> 有机率蓝屏

测试系统Windows 10 1909 X64

![image-20210911115757383](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2021-34486_Windows_10_1909_X64.gif)

#### 参考项目

- [KaLendsi](https://github.com/KaLendsi/CVE-2021-34486)

#### 分析文章

- [Event Tracing for Windows (ETW) TimerCallbackContext Object Use-After-Free Vulnerability](https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html)
