CVE-2026-29923

This repository provides a detailed technical analysis of CVE-2026-29923, a local privilege escalation vulnerability in the pstrip64.sys kernel driver. The vulnerability allows arbitrary physical memory mapping via an exposed IOCTL, enabling attackers to escalate privileges to SYSTEM by modifying kernel structures.

This repository contains a functional exploit PoC for CVE-2026-29923, demonstrating a local privilege escalation (LPE) via physical memory manipulation through a vulnerable driver. The code maps physical memory to locate and modify process tokens, enabling privilege escalation.