EIP-2026-117380

This exploit targets a kernel-mode privilege escalation vulnerability in Kingsoft AntiVirus 2012's KisKrnl.sys driver. It leverages an unchecked buffer write in the hook function of NtQueryValueKey to achieve local privilege escalation, demonstrated by executing a shellcode that displays a message on the screen.