CVE-2024-26169 PoC — Windows Error Reporting Service Elevation of Privilege Vulnerability

Source

https://github.com/kautilyagupt/CVE-2024-26169-Detail-1

Associated Vulnerability

Title: Windows Error Reporting Service Elevation of Privilege Vulnerability (CVE-2024-26169)
Description:Windows Error Reporting Service Elevation of Privilege Vulnerability

Readme

# CVE-2017-11882-metasploit
This is a Metasploit module which exploits CVE-2017-11882 using the POC below:

https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.


## Installation
1) Copy the cve_2017_11882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local/
2) Copy the cve-2017-11882.rtf to /usr/share/metasploit-framework/data/exploits/

This module is a quick port to Metasploit and uses mshta.exe to execute the payload.

There are better ways to implement this module and exploit but will update it as soon as I have the time.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →