Exploiting Windows COM/WinRT ServicesExploiting Windows COM/WinRT Services

The Component Object Model (COM) and Windows Runtime (WinRT) are widely used in windows systems, they are often used for cross-process communication and UWP Application. Both of them provide large attack surfaces for hackers to hunt for LPE, RCE and Sandbox Escape vulnerabilities. In the past year, we have found more than 100 bugs in COM/WinRT service... By: XueFeng Li & Zhiniang Peng Full Abstract & Presentation Materials: #exploiting-windows-comwinrt-services-23653