The fix for CVE-2015-2553 can be bypassed to get limited mount reparse points working again for sandbox attacks. Continue reading...