EIP-2026-119653

PRE-CVE

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119653. PoCs published by OJ Reeves.

AI-analyzed exploit summary This Metasploit module exploits a vulnerability in the Capcom.sys kernel driver on Windows 7 x64, allowing arbitrary kernel function execution from userland by disabling SMEP. It injects a reflective DLL into a process (e.g., notepad.exe) to achieve privilege escalation.

Description

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)

Exploits (1)

exploitdb WORKING POC VERIFIED

by OJ Reeves · rubylocalwindows_x86-64

https://www.exploit-db.com/exploits/40451

View Code ZIP pw:eip

This Metasploit module exploits a vulnerability in the Capcom.sys kernel driver on Windows 7 x64, allowing arbitrary kernel function execution from userland by disabling SMEP. It injects a reflective DLL into a process (e.g., notepad.exe) to achieve privilege escalation.

Classification

Working Poc 100%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Capcom.sys kernel driver on Windows 7 x64

No auth needed

Prerequisites: Windows 7 x64 system with Capcom.sys driver present · Local access to the target system

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1055 - Process Injection

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026