Microsoft Windows RestrictedErrorInfo Unmarshal Section Handle Use-After-Free

The WinRT RestrictedErrorInfo does not correctly check the validity of a handle to a section object which results in closing an unrelated handle which can lead to an elevation of privilege.

Leave a Reply