PoC Archive PoC Archive

tag

Alpc

  • CVE-2026-20817 binary HIGH

    Windows Error Reporting Service ALPC Local Privilege Escalation (CVE-2026-20817)

    CVE-2026-20817 abuses an ALPC-based elevation primitive in the Windows Error Reporting Service. WerSvc listens on the \WindowsErrorReportingServicePort ALPC port and, upon receiving a specially crafted WERSVCMSG request with the SvcElevatedLaunch message flag…

    Unverified 2026-07-05
  • None assigned as of 2026-07-03 binary HIGH

    System Informer phsvc Trusted-Host Confused Deputy LPE

    System Informer's privileged helper process phsvc exposes an ALPC API port (\BaseNamedObjects\SiSvcApiPort) with a connect ACL open to Everyone, and authorizes connecting clients purely by checking whether the client's process image is generically…

    Unverified 2026-07-03