Windows Elevation of Privilege Flaw Exploited by QakBot Malware, PoC Published

The flaw, rated 7. 8 on the CVSS scale, involves a heap-based buffer overflow in the Desktop Window Manager core library, allowing attackers to execute arbitrary code with SYSTEM privileges.