Windows Edge/IE Isolated Private Namespace Insecure DACL Privilege Escalation

The isolated private namespace created by ierutils has a insecure DACL which allows any appcontainer process to gain elevated permissions on the namespace directory which could lead to elevation of privilege.

Continue reading...