CVE-2026-32223
MEDIUMWindows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2026-32223. PoCs published by enki-kr, XZ1r0.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-32223, a heap-based buffer overflow in the Windows USB print driver (usbprint.sys). The exploit achieves local privilege escalation (LPE) to SYSTEM by leveraging USB device emulation, pool feng shui, and ghost chunk techniques.
Description
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Exploits (2)
This repository contains a functional exploit for CVE-2026-32223, a heap-based buffer overflow in the Windows USB print driver (usbprint.sys). The exploit achieves local privilege escalation (LPE) to SYSTEM by leveraging USB device emulation, pool feng shui, and ghost chunk techniques.
This repository contains a functional exploit for CVE-2026-32223, a heap-based buffer overflow in the Windows USB print driver (usbprint.sys). The exploit leverages pool feng shui, ghost chunk techniques, and arbitrary read/write primitives to achieve local privilege escalation (LPE) to SYSTEM.
References (3)
Scores
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H