Microsoft Windows StorageFolder Marshaled Object Access Check Bypass / Privilege Escalation

The StorageFolder class when used out of process can bypass security checks to read and write files not allowed to an AppContainer.
Image

Pensée du jour :

Ce que l'homme a fait ,

l'homme peut le défaire.

 

"No secure path in the world"