Microsoft Windows Kernel renaming layered keys does not reference count security descriptors, leading to a use-after-free condition. Continue reading...