Microsoft Windows WFP Default Rules AppContainer Capability Bypass Privilege Escalation

The default rules for the WFP connect layers permit certain executables to connect TCP sockets in AppContainers without capabilities leading to elevation of privilege.

MD5 | 37069deaf47980f1a4c39f62bc13ce25

Download

Source: packetstormsecurity.com