
CVE-2026-66804-CrossDevice-Service-EoP
CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM
educationexploitationpenetration-testing+3

CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM

Local Windows privilege escalation PoC for CVE-2026-66804: plants a COM DLL in a missing path to abuse Camera FrameServer and impersonate SYSTEM.

KERUI K259 5MP Wi-Fi (Tuya Smart Security Camera) contains a code execution vulnerability