Microsoft Windows WOF FSCTL_SET_REPARSE_POINT_EX Cached Signing Level Bypass

The Microsoft Windows WOF filter driver does not correctly handle the reparse point setting which allows for an arbitrary file to be cached signed leading to a bypass of UMCI.

MD5 | 6ef17e92e2a41526202eea6e0a2e23cb

Download

Source: packetstormsecurity.com