
Public exploit and research material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability enabling local privilege escalation to SYSTEM. Includes source code, build scripts, and bilingual write-ups for defensive research.
This repository contains the public disclosure material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds.

public/
README.md
README.es.md
writeup-en.md
writeup-es.md
build.ps1
Makefile
src/
cve_2026_42980_lpe.c
helpers.c
wmi_guids.h
assets/
photo-poc-system.jpg
Requirements:
Build with:
powershell -NoProfile -ExecutionPolicy Bypass -File .\build.ps1
Or:
nmake /f Makefile
The binary is generated at:
build\poc.exe
This code is provided for education, defensive research, and authorized testing only. Run it exclusively in isolated lab systems you own or are explicitly permitted to test.