EIP-2026-117476

This exploit targets a local privilege escalation vulnerability in Micropoint Proactive Defense's mp110013.sys driver by manipulating PspCreateProcessNotifyRoutine and PspLegoNotifyRoutine offsets via DeviceIoControl to achieve arbitrary kernel memory writes. It includes shellcode to disable write protection and modify kernel memory, specifically targeting Windows XP.