EIP-2026-117533
PRE-CVEMicrosoft Windows - Local XPS Print Spooler Sandbox Escape
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117533. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a TOCTOU (Time-of-Check to Time-of-Use) vulnerability in the Windows XPS Print Spooler to escape sandbox restrictions. It abuses the spooler's token elevation behavior and a symlink attack via NtImpersonateAnonymousToken to write arbitrary files outside the sandbox, achieving local privilege escalation.
Description
Microsoft Windows - Local XPS Print Spooler Sandbox Escape
Exploits (1)
This exploit leverages a TOCTOU (Time-of-Check to Time-of-Use) vulnerability in the Windows XPS Print Spooler to escape sandbox restrictions. It abuses the spooler's token elevation behavior and a symlink attack via NtImpersonateAnonymousToken to write arbitrary files outside the sandbox, achieving local privilege escalation.