EIP-2026-118116
PRE-CVEWindows MultiPoint Server 2011 SP1 - RpcEptMapper and Dnschade Local Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118116. PoCs published by Marcio Mendes.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Windows MultiPoint Server 2011 SP1 by manipulating registry keys (Dnscache and RpcEptMapper) to load a malicious DLL via the Windows Performance Monitoring mechanism, resulting in code execution as Local System.
Description
Windows MultiPoint Server 2011 SP1 - RpcEptMapper and Dnschade Local Privilege Escalation
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in Windows MultiPoint Server 2011 SP1 by manipulating registry keys (Dnscache and RpcEptMapper) to load a malicious DLL via the Windows Performance Monitoring mechanism, resulting in code execution as Local System.