DCOM Service PsmServiceExtHost LPE
Summary Threre is a heap buffer overflow vulnerability in a DCOM service that can be leveraged to achieve LPE from a Medium IL standard user to System IL. This was tested on Windows 11 25H2 Build 26200.8457 (latest patch as of May 2026). Vendor Response Microsoft has released a patch as part of its September …
