EIP-2026-118116

This exploit leverages a local privilege escalation vulnerability in Windows MultiPoint Server 2011 SP1 by manipulating registry keys (Dnscache and RpcEptMapper) to load a malicious DLL via the Windows Performance Monitoring mechanism, resulting in code execution as Local System.