漏洞描述
csc.sys驱动程序中带有METHOD_NEITHERI/O控制代码的IOCTL地址验证不正确，导致任意地址写零漏洞。攻击者在Windows上获得较低权限的任意代码执行后，可以利用该漏洞将低权限提升至system权限。
Windows CSC服务权限提升漏洞(CVE-2024-26229)
PoC代码
暂无相关漏洞推荐
- Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
- Windows 11 PolicyConfiguration 计划任务特权提升漏洞（CVE-2025-60710）
- Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)
- POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution
- POC CVE-2017-7269: Windows Server 2003 & IIS 6.0 - Remote Code Execution
- POC CVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery
- POC generic-windows-lfi: Generic Windows based LFI Test
- POC automatic-windows-updates-disabled: Automatic Windows Updates Disabled
- POC sticky-keys-enabled-login: Sticky Keys Enabled at Login Screen
- POC windows-active-desktop-enabled: Active Desktop Enabled
- POC windows-administrative-shares-enabled: Administrative Shares Enabled
- POC windows-administrator-blank-password: Built-in Administrator Account Has Blank Password
- POC windows-anonymous-sid-enumeration-allowed: Windows Allows Anonymous SID Enumeration