---
id: 6548
title: "CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM"
cve: CVE-2026-66804
cvss: 7.8
severity: high
vendor: "Microsoft"
product: "Windows Cross Device Service / Cross Device Virtual Camera"
affected_versions: "Windows 10 22H2 before 10.0.19045.7663; Windows 11 24H2 before 10.0.26100.9168; Windows 11 25H2 before 10.0.26200.9168; Windows 11 26H1 before 10.0.28000.2704"
source_domain: github.com
source_url: "https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP"
published_at: "2026-08-13T01:42:43Z"
tags: ["public-poc", "privilege-escalation", "windows-security", "windows", "exploit", "dll-hijacking", "com-hijacking", "cwe-284", "vulnerability", "cve", "poc", "cve-2026-66804", "dll-planting"]
phying_url: "https://phying.com/item/6548"
lang: en
---

# CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM

## Summary

A PoC for CVE-2026-66804: a missing-path DLL-planting flaw in Windows Cross Device virtual camera lets a standard user get code loaded as LOCAL SERVICE, then escalate to SYSTEM.

## Why it matters

The PoC demonstrates a complete local privilege-escalation chain from a standard user to SYSTEM, and exploit code is now public. Affected Windows endpoints should install Microsoft's August 2026 security updates promptly. Reproduction plants a DLL in a system path and triggers a privileged service, so it should only be performed in an explicitly authorized, recoverable lab environment.

## Intelligence Metadata

- **Sources:** github.com
- **CVE:** CVE-2026-66804
- **CVSS:** 7.8
- **Vendor:** Microsoft
- **Product:** Windows Cross Device Service / Cross Device Virtual Camera
- **Affected versions:** Windows 10 22H2 before 10.0.19045.7663; Windows 11 24H2 before 10.0.26100.9168; Windows 11 25H2 before 10.0.26200.9168; Windows 11 26H1 before 10.0.28000.2704
- **Published:** 2026-08-13T01:42:43Z
- **Original:** https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP
- **Phying News:** https://phying.com/item/6548