EIP-2026-118026

This is a writeup describing a privilege escalation vulnerability in Trend Micro Security 2019 products. The exploit involves placing a malicious binary in the C:\ directory, which is executed with SYSTEM privileges by the coreServiceShell.exe service upon reboot.