CVE-2026-29923
HIGHEnTech Taiwan PowerStrip <=3.90.736 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2026-29923. PoCs published by Smarttfoxx, mein-0, athenasec16.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2026-29923, a local privilege escalation vulnerability in the pstrip64.sys kernel driver. The vulnerability allows arbitrary physical memory mapping via an exposed IOCTL, enabling attackers to escalate privileges to SYSTEM by modifying kernel structures.
Description
The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.
Exploits (3)
This repository provides a detailed technical analysis of CVE-2026-29923, a local privilege escalation vulnerability in the pstrip64.sys kernel driver. The vulnerability allows arbitrary physical memory mapping via an exposed IOCTL, enabling attackers to escalate privileges to SYSTEM by modifying kernel structures.
This repository contains a functional exploit for CVE-2026-29923, a local privilege escalation vulnerability in the pstrip64.sys driver (EnTech Taiwan PowerStrip ≤ 3.90.736). The exploit leverages an unrestricted physical memory read/write primitive to overwrite the token of the current process with the SYSTEM token, thereby escalating privileges.
This repository contains a functional exploit PoC for CVE-2026-29923, demonstrating a local privilege escalation (LPE) via physical memory manipulation through a vulnerable driver. The code maps physical memory to locate and modify process tokens, enabling privilege escalation.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H