Microsoft Windows WSAQuerySocketSecurity AppContainer Privilege Escalation

The WSAQuerySocketSecurity API returns full anonymous impersonation tokens for connected peers in an AppContainer leading to a sandbox escape.

Leave a Reply