
Proof-of-concept exploit for CVE-2021-40449, a Windows kernel use-after-free in NtGdiResetDC, demonstrating privilege escalation via user-space memory allocation.
A POC for CVE-2021-40449.
Only tested on 1809, the code is a bit rough, but it's a good experience for me.
Instead of using the ThreadName method, user-space memory allocation is used.