Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally.
What kind of security feature could be bypassed by successfully exploiting this vulnerability? This vulnerability could bypass Windows Administrator Protection, a security feature designed to prevent applications running with standard user permissions from performing actions that require administrator access. Successful exploitation could allow an attacker to run code with administrator privileges without the normal security checks.
Antonio Cocomazzi with <a href="https://www.sentinelone.com/">SentinelOne</a>, Simone Nicchi with <a href="https://www.sentinelone.com/">SentinelOne</a>