EIP-2026-117515
PRE-CVEMicrosoft Windows - 'MsiAdvertiseProduct' Arbitrary File Read
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117515. PoCs published by evil_polar_bear.
AI-analyzed exploit summary The writeup describes a TOCTOU (Time-of-Check Time-of-Use) vulnerability in the Windows Installer service's `MsiAdvertiseProduct` function, allowing arbitrary file reads as SYSTEM via junction manipulation. The PoC involves a race condition to exploit the impersonation check, enabling unauthorized access to files like `desktop.ini` or document metadata.
Description
Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Read
Exploits (1)
The writeup describes a TOCTOU (Time-of-Check Time-of-Use) vulnerability in the Windows Installer service's `MsiAdvertiseProduct` function, allowing arbitrary file reads as SYSTEM via junction manipulation. The PoC involves a race condition to exploit the impersonation check, enabling unauthorized access to files like `desktop.ini` or document metadata.