Microsoft Windows WLDP CLSID Policy .NET COM Instantiation UMCI Bypass

The enlightened Windows Lockdown Policy check for COM Class instantiation can be bypassed by using a bug in .NET leading to arbitrary code execution on a system with UMCI enabled (e.g. Device Guard).

MD5 | 9af4ae4b97751a5713a7402ad0feb6c6

Download

Source: packetstormsecurity.com