As cited
Copy frozen at (site build).
vulnerabilities
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Researchers demonstrated remote code execution (RCE) within a Windows Virtualization-Based Security (VBS) enclave protecting the SmartScreen anti-phishing feature by exploiting a four-byte write vulnerability and timing side-channel. The attack bypasses the isolation mechanism designed to prevent compromise of password secrets even when the broader system is compromised. The research was conducted in a controlled lab environment.
Why it matters: Organizations relying on Windows VBS enclaves for credential protection need awareness that the SmartScreen enclave isolation is not absolute; security teams should monitor for patches addressing this class of VBS escape and evaluate compensating controls for high-value credential storage.
- Source published
- First seen by Cybersecurity Tracker