CVE-2024-26229 PoC — Windows CSC Service Elevation of Privilege Vulnerability

Source

https://github.com/varwara/CVE-2024-26229

Associated Vulnerability

Title: Windows CSC Service Elevation of Privilege Vulnerability (CVE-2024-26229)
Description:Windows CSC Service Elevation of Privilege Vulnerability

Description

CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

Readme

# CVE-2024-26229
CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code in the csc.sys driver

![csc](csc.png)

## Acknowledgements

Credits to the Eric Egsgard and his talk at [OffensiveCon24](https://www.youtube.com/watch?v=2eHsnZ4BeDI)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →