EIP-2026-117549

This exploit targets a Windows kernel vulnerability by leveraging a vulnerable driver (WTCAP_A) to overwrite a token object address, enabling local privilege escalation. It uses undocumented NtQuerySystemInformation to locate token handles and crafts an IOCTL request to manipulate kernel memory.