Exploit for CVE-2024-26229-lpe

kitploit · 2026-09-04

Description

LPE in csc.sys driver via improper address validation in METHOD_NEITHER IOCTL.

Affected software

Microsoft Windows 10 1507< 10.0.10240.20596

Microsoft Windows 10 1607< 10.0.14393.6897

Microsoft Windows 10 1809< 10.0.17763.5696

Microsoft Windows 10 21h2< 10.0.19044.4291

All known vulnerabilities by product

Windows Windows Csc Service

CVSS 7.8 for CVE-2024-26229

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-09-04 05:56

Last Seen:2026-09-05 00:05

Reporter:KitPloit

Tags

csc.sys driverLocal Privilege ElevationImproper Address ValidationMETHOD_NEITHER IOCTLCWE-781

Other exploits for CVE-2024-26229

CVE-2024-26229-exploit

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

CVE-2024-26229-BOF

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

CVE-2024-26229-BOF

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-DKSTAR11Q-CVE-2024-26229-LPE
# CVE-2024-26229

CWE-781: Некорректная проверка адреса в IOCTL с кодом управления вводом-выводом METHOD_NEITHER в драйвере csc.sys

![csc](https://assets.kitploit.com/production/public/readmes/24775/f76f5b89eb8a6f54c44e5ac955c7bdb9386ef48dd4ac796e33f83565f7a2e1ad.png)